kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:32:58 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2c8002) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, 0x0, 0x0) socket(0x1a, 0x0, 0x0) 11:32:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:32:59 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) 11:32:59 executing program 4: io_uring_setup(0x447, &(0x7f0000000900)={0x0, 0x0, 0x4}) 11:32:59 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:32:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:32:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB=' \x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:32:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x9}]}) 11:32:59 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11:32:59 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:32:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:32:59 executing program 4: r0 = getpgrp(0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000440)=0x1ff) 11:32:59 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:00 executing program 5: getpid() r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/ipc\x00') 11:33:00 executing program 4: mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/192) 11:33:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:00 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB=' \x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:01 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x4000) 11:33:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0xffffffffffffffff}) 11:33:01 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) shutdown(r0, 0x1) 11:33:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:01 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_getaddr={0x18}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="1ba40000000000002000128008000100736974001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100001080000000c0000000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 11:33:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000100)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2c8002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) [ 1714.507135][T30022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 11:33:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:02 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) shutdown(r0, 0x1) 11:33:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:02 executing program 5: set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0) 11:33:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="4d398c0141000000000000abde00000000000000", 0x14, 0x0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 11:33:02 executing program 4: r0 = getpgid(0x0) r1 = syz_clone3(&(0x7f0000000440)={0x4040000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0, {0x7}, &(0x7f0000000280)=""/112, 0x70, &(0x7f0000000300)=""/202, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) r3 = getpgid(0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_clone3(&(0x7f0000000540)={0x68100300, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x12}, &(0x7f00000000c0)=""/169, 0xa9, &(0x7f0000000180)=""/11, &(0x7f00000004c0)=[0x0, r0, r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9, {r4}}, 0x58) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x2, r6, 0xee00, 0xee01, 0xee00, 0x181, 0x8001}, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x4, 0x5, 0x7, 0x6, 0x8001, r5, r3}) getgroups(0x2, &(0x7f0000000700)=[0xee01, 0xffffffffffffffff]) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, r7, 0x0, r6, r9, 0xc0, 0x1}, 0x0, 0x0, 0x5e2, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x1, 0x0, 0x0, r2, r2}) getresgid(&(0x7f00000007c0)=0x0, &(0x7f0000000800), &(0x7f0000000840)) read$FUSE(r4, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x5, &(0x7f00000028c0)=[r10, r8, r8, r12, r8]) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000002900)='syz0\x00') write$FUSE_OPEN(r4, &(0x7f0000002940)={0x20, 0xfffffffffffffff5, r11}, 0x20) syz_clone3(&(0x7f0000002bc0)={0x40002400, &(0x7f0000002980), &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0, {0x1c}, &(0x7f0000002a40), 0x0, &(0x7f0000002a80)=""/230, &(0x7f0000002b80)=[r0, r0, r3, 0xffffffffffffffff, r5, r5], 0x6, {r4}}, 0x58) getpgid(r14) r15 = openat$cgroup_ro(r4, &(0x7f0000002c40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003dc0)={0x11, 0x2, &(0x7f0000002c80)=@raw=[@map_val={0x18, 0x6}], &(0x7f0000002cc0)='GPL\x00', 0x3, 0x1000, &(0x7f0000002d00)=""/4096, 0xc2c00, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000003d00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000003d40)={0x3, 0xd, 0x24, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003d80)=[r4, r4]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003e40)={r15, r16, 0x0, r4}, 0x10) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r17 = getpid() syz_clone3(&(0x7f0000004400)={0x40100000, &(0x7f0000004100), &(0x7f0000004140), &(0x7f0000004180)=0x0, {0x24}, &(0x7f00000041c0)=""/225, 0xe1, &(0x7f00000042c0)=""/218, &(0x7f00000043c0)=[r2], 0x1, {r15}}, 0x58) syz_clone3(&(0x7f00000044c0)={0x40800000, &(0x7f0000003e80), &(0x7f0000003ec0), &(0x7f0000003f00), {0x33}, &(0x7f0000003f40)=""/170, 0xaa, &(0x7f0000004000)=""/249, &(0x7f0000004480)=[r17, r13, r18, r13], 0x4, {r4}}, 0x58) r19 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) ioctl$UI_SET_EVBIT(r19, 0x40045564, 0x5) r20 = getpgid(r18) syz_clone3(&(0x7f0000004880)={0x200, &(0x7f0000004580), &(0x7f00000045c0), &(0x7f0000004600), {0x1}, &(0x7f0000004640)=""/200, 0xc8, &(0x7f0000004740)=""/209, &(0x7f0000004840)=[r13, r20, r13], 0x3}, 0x58) 11:33:02 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) 11:33:02 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) shutdown(r0, 0x1) 11:33:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB=' \x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:02 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000c0010010"]) 11:33:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:03 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="80", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000200)="fd", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)="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", 0x34000, 0x0, 0x0, 0x0) 11:33:03 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:03 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:04 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0003000006c12a49b7f83c8a4bd2596ce10a5848026712b915f6b52dc2ba6e3a8333ffb1eefb5ce2ca"], 0x300}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x4000000000005cd, 0x42, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 11:33:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:04 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x8}) 11:33:04 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/203) 11:33:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:05 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:05 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 11:33:05 executing program 4: syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x148, 0x0, 0x0, [{{0x4, 0x0, 0x0, 0x0, 0x7, 0x4b, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x9, 0x0, 0x0, 0xee00, 0x0, 0x80}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}]}, 0x0, &(0x7f0000000c80)={0x20, 0xfffffffffffffff5, 0x7, {0x0, 0x4, 0x10000, 0x3}}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:33:05 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x0, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x8, 0x4}, 0x3, 0x100, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0xa}) syslog(0x3, &(0x7f0000000000)=""/140, 0x8c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x400) ioctl$FBIOBLANK(r6, 0x4611, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c001f006aecb400ffdbdf2590de91b96d0239957bdc0000"], 0x1c}}, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r7}], 0x1, 0x8000000) write$FUSE_ATTR(r7, &(0x7f0000000380)={0x78}, 0xfffffdef) sendmsg$nl_route(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@setlink={0x20, 0x13, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x6d000, 0x21000}}, 0x20}, 0x1, 0x0, 0x0, 0xc014}, 0x8000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x200400d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) 11:33:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:05 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:07 executing program 4: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000140), 0x700, 0x0) 11:33:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:07 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:08 executing program 4: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) 11:33:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:08 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 11:33:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:10 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 11:33:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x0, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x8, 0x4}, 0x3, 0x100, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0xa}) syslog(0x3, &(0x7f0000000000)=""/140, 0x8c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x400) ioctl$FBIOBLANK(r6, 0x4611, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c001f006aecb400ffdbdf2590de91b96d0239957bdc0000"], 0x1c}}, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r7}], 0x1, 0x8000000) write$FUSE_ATTR(r7, &(0x7f0000000380)={0x78}, 0xfffffdef) sendmsg$nl_route(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@setlink={0x20, 0x13, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x6d000, 0x21000}}, 0x20}, 0x1, 0x0, 0x0, 0xc014}, 0x8000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x200400d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) 11:33:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:10 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 11:33:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:10 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:10 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:10 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:12 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="2000000000000000010000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:12 executing program 5: io_uring_setup(0x447, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3}) 11:33:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:12 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:12 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x40000100, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="8b815e36b103381e4b3049abbb74a07192c7d11b6ad4fcbe9bda770998137e11e11d34d66308ee26625157a7b4e86c1816032f8c9d0d7b4660b268f6fa15d37a8937814d05f189e408c3c989b8a2c6046471cf0833d7b7890a960b70b5dff5f2a2ab316e92a9a6180e47a1a5e85bb518b3ea35f6efdcb5b0aba7bd13f35887b88d5bd3dd146cf6beacfccfc8e82a0d81d45dccacf9ec7d380def5ad76609ad64fb5227c4ec83febb76de0f0887350ea6af8c6c2d775cd7211443", 0xba}, {&(0x7f0000000840)="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", 0x14c}, {&(0x7f0000000340)="68b0d81e398caf8a0e23bb42bb10e07a381c2f0e1eb06ae5af898421209f7515974611333ef757803f5c2e676e4620340d9f051d26610fa6ed871e", 0x3b}], 0x3) shutdown(r0, 0x1) 11:33:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:12 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:12 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0x79, 0xe1, 0x20, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x92, 0x85, 0x72, 0x0, [], [{}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xba, 0xdd, 0x0, [], [{{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) 11:33:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) [ 1726.174771][T25716] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1726.423574][T25716] usb 6-1: Using ep0 maxpacket: 32 [ 1726.543679][T25716] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1726.558930][T25716] usb 6-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 1726.622037][T25716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1726.653127][T25716] usb 6-1: config 0 interface 0 has no altsetting 1 [ 1726.833835][T25716] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice=3c.64 [ 1726.842931][T25716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.891877][T25716] usb 6-1: Product: syz [ 1726.913984][T25716] usb 6-1: Manufacturer: syz [ 1726.918635][T25716] usb 6-1: SerialNumber: syz [ 1726.981481][T25716] usb 6-1: config 0 descriptor?? [ 1727.364318][T25716] usb 6-1: USB disconnect, device number 10 11:33:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="2000000000000000010000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:14 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) 11:33:14 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa8, 0x79, 0xe1, 0x20, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) 11:33:14 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 1727.977537][T30249] binder_alloc: 30248: binder_alloc_buf, no vma 11:33:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) 11:33:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, 0x0) 11:33:14 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:14 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 1728.177840][T30260] binder_alloc: 30256: binder_alloc_buf, no vma [ 1728.203758][ T5120] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1728.493572][ T5120] usb 6-1: Using ep0 maxpacket: 32 [ 1728.685782][ T5120] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1728.967410][ T5120] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice=3c.64 [ 1728.988458][ T5120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.010804][ T5120] usb 6-1: Product: syz [ 1729.017504][ T5120] usb 6-1: Manufacturer: syz [ 1729.027903][ T5120] usb 6-1: SerialNumber: syz [ 1729.041828][ T5120] usb 6-1: config 0 descriptor?? [ 1729.156804][ T5120] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1729.174521][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1729.311395][ T5120] usb 6-1: USB disconnect, device number 11 11:33:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) 11:33:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, 0x0) 11:33:16 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="2000000000000000010000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) [ 1729.600876][T30274] binder_alloc: 30268: binder_alloc_buf, no vma 11:33:16 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa8, 0x79, 0xe1, 0x20, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:16 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, 0x0) 11:33:16 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[]) [ 1730.205219][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.211571][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.263665][T15693] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1730.523591][T15693] usb 6-1: Using ep0 maxpacket: 32 [ 1730.683653][T15693] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1730.943665][T15693] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice=3c.64 [ 1730.960325][T15693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.010435][T15693] usb 6-1: Product: syz [ 1731.021315][T15693] usb 6-1: Manufacturer: syz [ 1731.039450][T15693] usb 6-1: SerialNumber: syz [ 1731.066014][T15693] usb 6-1: config 0 descriptor?? 11:33:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:17 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[]) [ 1731.164619][T15693] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1731.193316][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 11:33:17 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 1731.358396][T15693] usb 6-1: USB disconnect, device number 12 11:33:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:18 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:18 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa8, 0x79, 0xe1, 0x20, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[]) 11:33:18 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1732.204577][T15693] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1732.453555][T15693] usb 6-1: Using ep0 maxpacket: 32 11:33:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB]) 11:33:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:19 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) [ 1732.614445][T15693] usb 6-1: unable to get BOS descriptor or descriptor too short 11:33:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:19 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 1732.853899][T15693] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice=3c.64 [ 1732.879890][T15693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.919264][T15693] usb 6-1: Product: syz [ 1732.950495][T15693] usb 6-1: Manufacturer: syz [ 1732.966682][T15693] usb 6-1: SerialNumber: syz [ 1732.993397][T15693] usb 6-1: config 0 descriptor?? [ 1733.069502][T15693] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1733.152609][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1733.302856][ T5120] usb 6-1: USB disconnect, device number 13 11:33:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB]) 11:33:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:20 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa8, 0x79, 0xe1, 0x20, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:20 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000140)=ANY=[@ANYBLOB]) 11:33:20 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) [ 1734.213748][ T3557] usb 6-1: new high-speed USB device number 14 using dummy_hcd 11:33:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:20 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:20 executing program 3: syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa8, 0x79, 0xe1, 0x20, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x5, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x78, 0x0, 0x3, 0x92, 0x85, 0x72, 0x0, [], [{{0x9, 0x5, 0xc}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x1}]}}]}}, {{0x9, 0x4, 0x9, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x28, &(0x7f00000006c0)={0x5, 0xf, 0x28, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ssp_cap={0xc}]}}) 11:33:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) [ 1734.487369][ T3557] usb 6-1: Using ep0 maxpacket: 32 [ 1734.610693][T25743] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1734.664647][ T3557] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1734.938408][ T3557] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice=3c.64 [ 1734.954406][ T3557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.968237][ T3557] usb 6-1: Product: syz [ 1734.972601][ T3557] usb 6-1: Manufacturer: syz [ 1734.979811][ T3557] usb 6-1: SerialNumber: syz [ 1734.997790][ T3557] usb 6-1: config 0 descriptor?? [ 1735.043929][T25743] usb 4-1: not running at top speed; connect to a high speed hub [ 1735.103868][ T3557] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1735.146077][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1735.163927][T25743] usb 4-1: config 5 has an invalid interface number: 120 but max is 1 [ 1735.182524][T25743] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1735.221719][T25743] usb 4-1: config 5 has an invalid interface number: 9 but max is 1 [ 1735.287551][T25743] usb 4-1: config 5 has no interface number 0 [ 1735.303736][T25743] usb 4-1: config 5 has no interface number 1 [ 1735.311270][ T3557] usb 6-1: USB disconnect, device number 14 [ 1735.319876][T25743] usb 4-1: config 5 interface 120 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1735.331283][T25743] usb 4-1: config 5 interface 120 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1735.342750][T25743] usb 4-1: config 5 interface 120 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1735.523905][T25743] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice=3c.64 [ 1735.542392][T25743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.558360][T25743] usb 4-1: Product: syz [ 1735.562673][T25743] usb 4-1: Manufacturer: syz [ 1735.580204][T25743] usb 4-1: SerialNumber: syz 11:33:22 executing program 5: 11:33:22 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) [ 1735.859321][T25743] usb 4-1: USB disconnect, device number 13 [ 1735.878151][T30389] binder: BINDER_SET_CONTEXT_MGR already set 11:33:22 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:33:22 executing program 5: 11:33:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) [ 1735.931914][T30389] binder: 30388:30389 ioctl 4018620d 20000000 returned -16 11:33:22 executing program 5: 11:33:22 executing program 5: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:22 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 11:33:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:23 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x17b, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) [ 1736.387799][T30412] binder: BINDER_SET_CONTEXT_MGR already set [ 1736.430170][T30412] binder: 30411:30412 ioctl 4018620d 20000000 returned -16 11:33:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1736.553218][T30418] binder: BINDER_SET_CONTEXT_MGR already set [ 1736.567392][T30418] binder: 30417:30418 ioctl 4018620d 20000000 returned -16 11:33:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:23 executing program 5: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:24 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 11:33:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:24 executing program 5: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:24 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x17b, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 11:33:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:24 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0x79, 0xe1, 0x20, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:25 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 11:33:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) [ 1738.583649][ T5120] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1738.859407][ T5120] usb 6-1: Using ep0 maxpacket: 32 [ 1739.166174][ T5120] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice=3c.64 [ 1739.208220][ T5120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.236526][ T5120] usb 6-1: Product: syz [ 1739.258034][ T5120] usb 6-1: Manufacturer: syz [ 1739.280939][ T5120] usb 6-1: SerialNumber: syz [ 1739.330305][ T5120] usb 6-1: config 0 descriptor?? [ 1739.426770][ T5120] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1739.438659][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 11:33:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:26 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x17b, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) [ 1739.606111][ T5120] usb 6-1: USB disconnect, device number 15 11:33:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:26 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:33:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:26 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:33:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:26 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom(r0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:33:26 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0x79, 0xe1, 0x0, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:26 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:26 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x17b, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) [ 1740.484470][T15693] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1740.683648][T15693] usb 6-1: device descriptor read/64, error 18 [ 1740.953581][T15693] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1741.153666][T15693] usb 6-1: device descriptor read/64, error 18 [ 1741.275618][T15693] usb usb6-port1: attempt power cycle 11:33:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:28 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa8, 0x79, 0xe1, 0x20, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x92, 0x85, 0x72}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x8, &(0x7f00000006c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) 11:33:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:28 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:28 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x17b, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 11:33:28 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 11:33:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1741.623669][T15633] usb 3-1: new high-speed USB device number 17 using dummy_hcd 11:33:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1741.683887][T15693] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1741.783706][T15693] usb 6-1: Invalid ep0 maxpacket: 0 [ 1741.873621][T15633] usb 3-1: Using ep0 maxpacket: 32 [ 1741.933874][T15693] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1742.043876][T15693] usb 6-1: Invalid ep0 maxpacket: 0 [ 1742.049349][T15693] usb usb6-port1: unable to enumerate USB device [ 1742.233669][T15633] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice=3c.64 [ 1742.246953][T15633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.311059][T15633] usb 3-1: Product: syz [ 1742.319875][T15633] usb 3-1: Manufacturer: syz [ 1742.331294][T15633] usb 3-1: SerialNumber: syz [ 1742.372712][T15633] usb 3-1: config 0 descriptor?? [ 1742.458982][T15633] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1742.502253][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1742.633388][T15633] usb 3-1: USB disconnect, device number 17 11:33:29 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0x79, 0xe1, 0x0, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:29 executing program 3: r0 = getpgid(0x0) syz_clone3(&(0x7f0000000440)={0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0, {0x7}, &(0x7f0000000280)=""/112, 0x70, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r2 = getpgid(0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_clone3(&(0x7f0000000540)={0x68100300, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f00000000c0)=""/169, 0xa9, 0x0, &(0x7f00000004c0)=[0x0, r0, 0x0, 0x0, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0], 0x8, {r3}}, 0x58) getresuid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x2, 0x0, 0xee00, 0xee01, 0xee00, 0x181, 0x8001}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x5, 0x7, 0x0, 0x0, 0x0, r2}) getgroups(0x1, &(0x7f0000000700)=[0xffffffffffffffff]) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x7ff, r1, r1}) getresgid(0x0, &(0x7f0000000800), 0x0) read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x2020) getgroups(0x2, &(0x7f00000028c0)=[0x0, 0x0]) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000002900)='syz0\x00') write$FUSE_OPEN(r3, 0x0, 0x0) syz_clone3(&(0x7f0000002bc0)={0x0, &(0x7f0000002980), 0x0, &(0x7f0000002a00), {0x1c}, 0x0, 0x0, &(0x7f0000002a80)=""/230, &(0x7f0000002b80)=[0x0, r2, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) getpgid(0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003dc0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000002d00)=""/4096, 0xc2c00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003d40)={0x3, 0x0, 0x24, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003d80)=[r3, r3]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003e40)={0xffffffffffffffff, r5}, 0x10) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) getpid() syz_clone3(&(0x7f0000004400)={0x40100000, &(0x7f0000004100), 0x0, &(0x7f0000004180)=0x0, {}, 0x0, 0x0, &(0x7f00000042c0)=""/218, &(0x7f00000043c0)=[r1], 0x1}, 0x58) syz_clone3(&(0x7f00000044c0)={0x40800000, 0x0, 0x0, &(0x7f0000003f00), {0x33}, 0x0, 0x0, &(0x7f0000004000)=""/249, 0x0, 0x0, {r3}}, 0x58) openat$uinput(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) getpgid(r6) 11:33:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x8000, 0x4, 0xcd}, 0x48) 11:33:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:30 executing program 2: bpf$MAP_CREATE(0x1500000000000000, &(0x7f0000000c40)=@base={0x1, 0x8000, 0x4, 0x1c0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 11:33:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1743.668279][T15633] usb 6-1: new high-speed USB device number 20 using dummy_hcd 11:33:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1743.863920][T15633] usb 6-1: device descriptor read/64, error 18 11:33:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1744.143665][T15633] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1744.343739][T15633] usb 6-1: device descriptor read/64, error 18 [ 1744.464437][T15633] usb usb6-port1: attempt power cycle [ 1744.873704][T15633] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1744.973761][T15633] usb 6-1: Invalid ep0 maxpacket: 0 [ 1745.123578][T15633] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1745.225266][T15633] usb 6-1: Invalid ep0 maxpacket: 0 [ 1745.230752][T15633] usb usb6-port1: unable to enumerate USB device 11:33:32 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0x79, 0xe1, 0x0, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 11:33:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1746.763565][T15633] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1746.963573][T15633] usb 6-1: device descriptor read/64, error 18 11:33:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x6, 0x4, 0x2d02, 0x1c0}, 0x48) 11:33:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x15, 0x8, 0x1000000}, 0x48) 11:33:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) [ 1747.240026][T15633] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1747.289206][T30556] binder: BINDER_SET_CONTEXT_MGR already set [ 1747.309433][T30556] binder: 30554:30556 ioctl 4018620d 20000000 returned -16 11:33:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x6, 0x4, 0x1803, 0x1c0}, 0x48) [ 1747.483674][T15633] usb 6-1: device descriptor read/64, error 18 11:33:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1747.603775][T15633] usb usb6-port1: attempt power cycle 11:33:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x6, 0x4, 0x1803, 0x1c0}, 0x48) 11:33:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x2, 0x4, 0x4, 0x1c0}, 0x48) [ 1747.899744][T30574] binder: 30569:30574 ioctl c0306201 0 returned -14 [ 1748.013729][T15633] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1748.113682][T15633] usb 6-1: Invalid ep0 maxpacket: 0 [ 1748.263578][T15633] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1748.353664][T15633] usb 6-1: Invalid ep0 maxpacket: 0 [ 1748.359014][T15633] usb usb6-port1: unable to enumerate USB device 11:33:36 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0x79, 0xe1, 0x20, 0x582, 0x0, 0x3c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xba, 0xdd}}]}}]}}, 0x0) 11:33:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x2, 0x4, 0x4, 0x1c0}, 0x48) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x10) 11:33:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x6, 0x4, 0x1803, 0x1c0}, 0x48) 11:33:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1749.424539][T30582] binder: 30577:30582 ioctl c0306201 0 returned -14 11:33:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x2c, r1, 0x1, 0x0, 0x0, {0x6}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}}, 0x0) [ 1749.565151][T30590] binder: 30589:30590 ioctl c0306201 0 returned -14 11:33:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x1c0, 0x200}, 0x48) 11:33:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x6, 0x4, 0x1803, 0x1c0}, 0x48) 11:33:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8000, 0x4, 0xcd}, 0x48) [ 1749.843682][T15693] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1750.103586][T15693] usb 6-1: Using ep0 maxpacket: 32 [ 1750.383818][T15693] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice=3c.64 [ 1750.400083][T15693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.430721][T15693] usb 6-1: Product: syz [ 1750.443723][T15693] usb 6-1: Manufacturer: syz [ 1750.448354][T15693] usb 6-1: SerialNumber: syz [ 1750.484589][T15693] usb 6-1: config 0 descriptor?? [ 1750.564974][T15693] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1750.628362][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1750.740208][T25743] usb 6-1: USB disconnect, device number 28 11:33:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x15, 0x10}, 0x48) 11:33:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="ffff0000000000003b870190000004000180"], 0x18}}, 0x0) 11:33:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x8000, 0x4, 0xcd, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 11:33:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x8000, 0x4, 0x1}, 0x48) 11:33:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x6, 0x4, 0x1200, 0x1c0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 11:33:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1b}, 0x94) 11:33:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x2, 0x4, 0x4, 0x1c0}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x10) 11:33:38 executing program 2: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c5}, 0x81) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0x7}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 11:33:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x3, 0x0, 0x4}, 0x48) 11:33:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:39 executing program 5: bpf$BPF_GET_MAP_INFO(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffd0e, &(0x7f0000000140)}, 0x10) 11:33:39 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:39 executing program 2: bpf$BPF_GET_MAP_INFO(0x12, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffd0e, &(0x7f0000000140)}, 0x10) 11:33:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x12, 0x4, 0x4, 0x5, 0x400}, 0x48) 11:33:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x4, 0x4, 0x4, 0x1c0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 11:33:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x20, r1, 0xffffffffffffffff, 0x0, 0x0, {0x6}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 11:33:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x5, 0x0, 0x0, 0x0, 0x4}, 0x48) 11:33:39 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x2, 0x4, 0x4, 0x1c0, 0x900}, 0x48) 11:33:39 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004600), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000004780)='./file1\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000004200)={0x20, 0x0, r1, {0x7}}, 0x20) 11:33:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x1c0, 0x1243}, 0x48) 11:33:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, {0x4}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0xfffffff7}}, 0x0) 11:33:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:41 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xa, 0x4) 11:33:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x2c}}, 0x0) [ 1754.487193][T30671] pimreg: left allmulticast mode 11:33:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x6, 0x4, 0x1200, 0x1c0}, 0x48) 11:33:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1b, 0x0, 0x0, 0x2000000}, 0x94) 11:33:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x10, 0x4, 0x0, 0x1c0}, 0x48) 11:33:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x3, 0x4, 0x4, 0x1c0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 11:33:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xf, 0x4, 0x4, 0x1c0}, 0x48) [ 1754.911997][T30695] binder: BINDER_SET_CONTEXT_MGR already set [ 1754.945211][T30695] binder: 30694:30695 ioctl 4018620d 20000000 returned -16 11:33:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x40}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r0) 11:33:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x15, 0x10, 0x6, 0x2}, 0x48) 11:33:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x3, 0x0, 0x4, 0x6}, 0x48) 11:33:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xd, 0x8000, 0x4, 0xcd}, 0x48) 11:33:42 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x113840, 0x0) 11:33:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x6, 0x4, 0x403, 0x1c0}, 0x48) 11:33:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x12, 0x4, 0x4, 0x4}, 0x48) 11:33:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 1756.251532][T30715] binder: BINDER_SET_CONTEXT_MGR already set 11:33:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x8000, 0x4, 0x6, 0xcd, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 11:33:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x5, 0x4, 0x4, 0x1c0}, 0x48) 11:33:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x8000, 0x4, 0xcd, 0x4}, 0x48) [ 1756.335278][T30715] binder: 30707:30715 ioctl 4018620d 20000000 returned -16 11:33:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xc008aeba, 0x0) 11:33:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:44 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x1500000000000000, &(0x7f00000002c0)=@base={0x1, 0x8000, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 11:33:44 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:44 executing program 2: io_setup(0x1000, &(0x7f00000002c0)=0x0) io_submit(r0, 0x0, 0x0) io_setup(0xffff, &(0x7f00000001c0)) 11:33:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x8}, &(0x7f0000000300)={0x1}, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 11:33:44 executing program 5: io_setup(0xc6, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}) 11:33:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000180001801400020070696d72656731000000000000000000140001800800030000000000080001000b60"], 0x40}}, 0x0) [ 1757.775227][T30748] binder: BINDER_SET_CONTEXT_MGR already set [ 1757.799925][T30748] binder: 30739:30748 ioctl 4018620d 20000000 returned -16 11:33:44 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x3, 0x0, 0x4, 0x6, 0x4}, 0x48) 11:33:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) [ 1758.107506][T30761] binder: BINDER_SET_CONTEXT_MGR already set 11:33:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4020aeb2, 0x0) [ 1758.152609][T30761] binder: 30759:30761 ioctl 4018620d 20000000 returned -16 11:33:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000000)={0x10201, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 11:33:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000040)=@newtaction={0x118, 0x10, 0x1, 0x0, 0x0, {}, [{0x104, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_SMAC={0xa, 0x4, @random="98318a773271"}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x29, 0x6, "a6938b9085688ba4c79c36a14d59f57e5c8982ffbf06466b3de53d5b8f093ce4c844b9bfca"}, {0xc}, {0xc}}}]}]}, 0x118}}, 0x0) 11:33:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 11:33:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) [ 1759.266294][T30782] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.2'. 11:33:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4020ae76, 0x0) 11:33:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) [ 1759.316923][T30786] binder: BINDER_SET_CONTEXT_MGR already set [ 1759.351583][T30786] binder: 30781:30786 ioctl 4018620d 20000000 returned -16 11:33:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 11:33:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x8070ae9f, 0x0) 11:33:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x4, 0x0, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) [ 1759.697671][T30814] binder: BINDER_SET_CONTEXT_MGR already set [ 1759.750581][T30814] binder: 30810:30814 ioctl 4018620d 20000000 returned -16 11:33:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4}) 11:33:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:47 executing program 2: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x8}, &(0x7f0000000300)={0x1}, 0x0, 0x0) 11:33:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xae71, 0x0) 11:33:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:47 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) 11:33:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x1a}) 11:33:47 executing program 3: io_setup(0xc6, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40001000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)="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") 11:33:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xae60, 0x0) 11:33:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4020ae46, 0x0) 11:33:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 11:33:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x10200, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 11:33:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x7ff}) 11:33:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x40087602, 0x0) 11:33:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, 0x0) 11:33:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:51 executing program 2: pselect6(0x40, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 11:33:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x5450, 0x0) 11:33:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x8}) 11:33:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 11:33:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic}) 11:33:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4008ae6a, 0x0) 11:33:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) 11:33:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4010ae42, 0x0) 11:33:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 11:33:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xc00caee0, 0x0) 11:33:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 11:33:52 executing program 5: io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={0x0}) r0 = syz_clone(0x40001000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/uts\x00') 11:33:52 executing program 2: io_setup(0xc6, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000002c0)) io_setup(0x6, &(0x7f0000000400)) 11:33:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x8010aebb, 0x0) 11:33:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000440)=0x2) [ 1766.204518][T30987] binder: 30986:30987 ioctl 4018620d 0 returned -22 11:33:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xae78, 0x0) 11:33:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x6040, 0x0) [ 1766.486056][T31006] binder: 30999:31006 ioctl 4018620d 0 returned -22 11:33:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 11:33:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 11:33:54 executing program 3: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001080), 0x81, 0x0) write$damon_monitor_on(r0, 0x0, 0x0) 11:33:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) [ 1768.002605][T31019] binder: 31011:31019 ioctl 4018620d 0 returned -22 11:33:54 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x41, 0x0) 11:33:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000070400"/20, @ANYRES32=0x0, @ANYBLOB="7deb040000000000200012800b00010067656e657665000010000280"], 0x48}, 0x1, 0x0, 0x0, 0x44810}, 0x0) 11:33:54 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsmount(r0, 0x0, 0x8c) 11:33:55 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x7f, 0x7f, 0x0, 0x20, 0x6}, 0x19, &(0x7f0000000300)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x4, 0xe7d6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xff, 0x4}]}, 0x3, [{0x2, &(0x7f0000000380)=@string={0x2}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) 11:33:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1768.390597][T31038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1768.482820][T31038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1768.570901][T31038] geneve2: entered promiscuous mode [ 1768.627519][T31038] geneve2: entered allmulticast mode [ 1768.743786][T25716] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1768.994189][T25716] usb 4-1: Using ep0 maxpacket: 16 [ 1769.113767][T25716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1769.145649][T25716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1769.165665][T25716] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1769.179521][T25716] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1769.191795][T25716] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1769.208781][T25716] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1769.253964][T25716] usb 4-1: language id specifier not provided by device, defaulting to English [ 1769.404256][T25716] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1769.427070][T25716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.460001][T25716] usb 4-1: SerialNumber: syz 11:33:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:56 executing program 2: syz_emit_ethernet(0x4df, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f0ff0004a90000fe8000000000000000000000000000aaff020000000000000000000000000001002300800000000000000000000000000000000000000000ff020000000000000000000000000001775ac658fa42b52e106a93ecb457e83eff010000000000000000000000000001ff010000000000000000000000000001850090780000000000104be57dd0c4c04ad79d103d6dc6c4fb8bd38492b2d171594665e6f238e774cb4968efbebf3d1598f394137c8a4f6ec3e11fb2c26cf909334ac8260769ffcc4fc6d2d6b42afd0e621fe0e2311f58d4228139e6696a127cbf29ba6fbc2ea76c116d74af3d16e3ae1686111fc64e1d30327413d112ae0f546bebff9926c9a38a8ae7e9622e2a00019e37835c0b4a69ae01c167919c000e31df906347392c8f0ed87a278f2ec83f14c9dad71557b020ecff94f5c16f8632ca3922b4c8f2095b456cb4"], 0x0) 11:33:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:56 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 11:33:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x4884) 11:33:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4000) [ 1769.763847][T25716] cdc_ncm 4-1:1.0: bind() failure 11:33:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1769.793866][T25716] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1769.800703][T25716] cdc_ncm 4-1:1.1: bind() failure [ 1769.875644][T25716] usb 4-1: USB disconnect, device number 14 11:33:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=@deltfilter={0x24}, 0x24}}, 0x40) [ 1769.917936][T31060] binder: 31059:31060 ioctl c0306201 0 returned -14 11:33:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_getnexthop={0x18}, 0x18}}, 0x40000) 11:33:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0xc) [ 1770.355014][T31074] binder: 31072:31074 ioctl c0306201 0 returned -14 11:33:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40001) 11:33:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@dellink={0x20}, 0x20}}, 0x20000800) 11:33:57 executing program 2: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x28a8c1, 0x5) 11:33:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_getroute={0x1c}, 0x1c}}, 0x4000004) 11:33:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) [ 1771.319056][T31081] binder: 31077:31081 ioctl c0306201 0 returned -14 11:33:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0) 11:33:58 executing program 5: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000340), 0x8277ddc2206b8ece, 0x1d1) 11:33:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:58 executing program 3: msgget$private(0x0, 0xa0) [ 1771.606884][T31099] binder: 31098:31099 ioctl c0306201 20001480 returned -14 11:33:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:33:59 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 11:33:59 executing program 5: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000340), 0x349302, 0x1e8) 11:33:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x823ee250ead384f8) [ 1772.838596][T31108] binder: 31107:31108 ioctl c0306201 20001480 returned -14 11:33:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:33:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000004500)={0x14}, 0x14}}, 0x4c080) 11:33:59 executing program 2: syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11:33:59 executing program 5: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0xffffffffffffffa8) 11:33:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:33:59 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024128f0d6acbb5e66bc0760000002cbd", @ANYRES32, @ANYBLOB="0f000300e0ff0d00e0ff06000c000100696e677265737300"], 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x40000000) 11:33:59 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) [ 1773.071199][T31121] binder: 31115:31121 ioctl c0306201 20001480 returned -14 11:34:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:01 executing program 3: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x9}}]}}}]}}]}}, 0x0) 11:34:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:01 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 11:34:01 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) [ 1774.455469][T31140] binder: 31137:31140 unknown command 0 [ 1774.463580][T31140] binder: 31137:31140 ioctl c0306201 20001480 returned -22 11:34:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000108e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 11:34:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:01 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x418001, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) unshare(0x42000000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x32ec60, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80000000}}], [{@uid_lt={'uid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_lt={'euid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x5}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}]}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) [ 1774.642455][T31150] binder: 31149:31150 unknown command 0 [ 1774.658923][T31150] binder: 31149:31150 ioctl c0306201 20001480 returned -22 11:34:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1774.693647][T30113] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1774.701278][T25716] usb 4-1: new full-speed USB device number 15 using dummy_hcd 11:34:01 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x418001, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) unshare(0x42000000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x32ec60, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80000000}}], [{@uid_lt={'uid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_lt={'euid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x5}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}]}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) [ 1774.840371][T31157] binder: 31156:31157 unknown command 0 [ 1774.873797][T31157] binder: 31156:31157 ioctl c0306201 20001480 returned -22 11:34:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1775.071914][T31164] binder: 31163:31164 unknown command 0 [ 1775.104744][T31164] binder: 31163:31164 ioctl c0306201 20001480 returned -22 [ 1775.123968][T30113] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1775.133881][T25716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1775.159390][T30113] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1775.176226][T25716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1775.217027][T30113] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1775.238655][T25716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1775.284805][T25716] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1775.483963][T30113] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1775.502525][T30113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.511658][T25716] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 1775.554401][T25716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.590936][T30113] usb 3-1: Product: syz [ 1775.609209][T25716] usb 4-1: Product: syz [ 1775.622608][T30113] usb 3-1: Manufacturer: syz [ 1775.642547][T25716] usb 4-1: Manufacturer: syz [ 1775.650167][T30113] usb 3-1: SerialNumber: syz [ 1775.660324][T25716] usb 4-1: SerialNumber: syz [ 1775.704312][T31138] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1775.711844][T31139] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1775.723704][T31138] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1775.964746][T25716] usbhid 4-1:1.0: can't add hid device: -22 [ 1775.970776][T30113] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 1775.979289][T25716] usbhid: probe of 4-1:1.0 failed with error -22 [ 1776.001987][T30113] usb 3-1: USB disconnect, device number 18 [ 1776.027229][T25716] usb 4-1: USB disconnect, device number 15 11:34:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00', @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:03 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x418001, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) unshare(0x42000000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x32ec60, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80000000}}], [{@uid_lt={'uid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_lt={'euid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x5}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}]}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 11:34:03 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000001280), 0x210040, 0x0) 11:34:03 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0xf800) 11:34:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:03 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 1776.787146][T31172] binder: 31170:31172 unknown command 0 [ 1776.802912][ T27] audit: type=1804 audit(1688902443.467:153): pid=31178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir641159378/syzkaller.1PHw6s/3554/bus" dev="sda1" ino=1967 res=1 errno=0 [ 1776.804861][T31172] binder: 31170:31172 ioctl c0306201 20001480 returned -22 11:34:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1776.911579][ T27] audit: type=1800 audit(1688902443.507:154): pid=31178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1967 res=0 errno=0 11:34:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:03 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x418001, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) unshare(0x42000000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x32ec60, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80000000}}], [{@uid_lt={'uid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_lt={'euid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x5}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}]}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) [ 1777.124911][T31188] binder: 31187:31188 unknown command 0 [ 1777.164914][T31188] binder: 31187:31188 ioctl c0306201 20001480 returned -22 11:34:03 executing program 2: socket(0x10, 0x0, 0x81) 11:34:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1777.394851][T31199] binder: 31197:31199 unknown command 25349 [ 1777.417533][T31199] binder: 31197:31199 ioctl c0306201 20001480 returned -22 11:34:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00', @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs, 0x6e) 11:34:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:05 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:05 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockname$inet6(r0, 0x0, 0x0) [ 1778.541482][T31210] binder: 31204:31210 unknown command 25349 [ 1778.591156][T31210] binder: 31204:31210 ioctl c0306201 20001480 returned -22 11:34:05 executing program 2: syz_clone(0x1000, &(0x7f0000000000)="d3", 0x1, 0x0, 0x0, 0x0) 11:34:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x140}, 0x1, 0x0, 0x520f}, 0x0) 11:34:05 executing program 5: fsopen(0x0, 0x91f8c09b43485519) 11:34:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:05 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 11:34:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024128f"], 0x38}}, 0x0) [ 1778.909632][T31221] binder: 31218:31221 unknown command 25349 [ 1778.941755][T31221] binder: 31218:31221 ioctl c0306201 20001480 returned -22 11:34:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:06 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) 11:34:06 executing program 2: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) 11:34:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00', @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:06 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x1ff) 11:34:06 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='%([$\'\x00', 0x0, r1) [ 1780.135966][T31238] binder: 31236:31238 unknown command 287493 [ 1780.159933][T31238] binder: 31236:31238 ioctl c0306201 20001480 returned -22 11:34:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:06 executing program 3: unshare(0x42000000) mount$fuseblk(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x32ec60, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80000000}}], [{@uid_lt={'uid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_lt={'euid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x5}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}]}}) [ 1780.375754][T31249] binder: 31247:31249 unknown command 287493 [ 1780.413697][T15628] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1780.421319][T25716] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1780.461719][T31249] binder: 31247:31249 ioctl c0306201 20001480 returned -22 11:34:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1780.823984][T15628] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.835522][T25716] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1780.868238][T15628] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.888415][T31256] binder: 31255:31256 unknown command 287493 [ 1780.911001][T15628] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1780.952662][T15628] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1780.963118][T31256] binder: 31255:31256 ioctl c0306201 20001480 returned -22 [ 1781.016456][T15628] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1781.053720][T25716] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 1781.084184][T25716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.126705][T25716] usb 3-1: Product: syz 11:34:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:07 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000, 0x0) 11:34:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1781.159828][T25716] usb 3-1: Manufacturer: syz 11:34:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x140}, 0x1, 0x0, 0x4000}, 0x0) [ 1781.203232][T25716] usb 3-1: SerialNumber: syz [ 1781.213425][T31262] binder_alloc: 31260: binder_alloc_buf, no vma [ 1781.253987][T31240] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1781.276273][T25716] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1781.284038][T15628] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1781.307621][T15628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.353092][T15628] usb 6-1: Product: syz [ 1781.368831][T15628] usb 6-1: Manufacturer: syz [ 1781.391613][T15628] usb 6-1: SerialNumber: syz [ 1781.444225][T31239] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1781.484575][T15628] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1781.497591][T15630] usb 3-1: USB disconnect, device number 19 [ 1781.696310][T15628] usb 6-1: USB disconnect, device number 29 11:34:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:08 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) [ 1782.276521][T31271] binder_alloc: 31270: binder_alloc_buf, no vma 11:34:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0xf800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='ext4_da_write_pages_extent\x00', r0}, 0x10) 11:34:09 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000640)=""/251, 0xfb}], 0x1}}], 0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 11:34:09 executing program 3: syz_clone(0x1000, &(0x7f0000000000)="d3", 0x1, &(0x7f00000000c0), 0x0, 0x0) 11:34:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1782.503220][ T27] audit: type=1804 audit(1688902449.167:155): pid=31275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir368001333/syzkaller.NWJ9Fj/1385/bus" dev="sda1" ino=1966 res=1 errno=0 11:34:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) accept4(r0, 0x0, 0x0, 0x69876b09503ac9a9) [ 1782.592352][ T27] audit: type=1800 audit(1688902449.197:156): pid=31275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1782.660869][T31288] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1782.707535][T31289] binder_alloc: 31276: binder_alloc_buf, no vma 11:34:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x300}, 0x0) 11:34:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:10 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4004011) 11:34:10 executing program 5: io_uring_setup(0x7c10, &(0x7f0000000100)={0x0, 0x0, 0x8}) 11:34:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:11 executing program 2: setgroups(0x5, &(0x7f0000000480)=[0x0, 0xee00, 0x0, 0x0, 0x0]) 11:34:11 executing program 5: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="8fb9c0071a590c9102468c"], 0x64}}, 0x0) 11:34:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}]}, 0x24}}, 0x0) 11:34:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1785.216907][T31312] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1785.406571][T31318] binder: 31317:31318 ioctl c0306201 0 returned -14 11:34:12 executing program 5: socket$inet(0x2, 0x3, 0x1f) 11:34:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fstat(r0, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) 11:34:12 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="a1090000000000000a004e230000007ffe80000000000000000000000000001b00100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000a004e"], 0x290) 11:34:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:12 executing program 2: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') [ 1785.742922][T31328] binder: 31324:31328 ioctl c0306201 0 returned -14 11:34:13 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x140}}, 0x0) 11:34:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x38}}, 0x0) 11:34:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2201, 0x0) write$P9_RCREATE(r0, &(0x7f00000002c0)={0x18}, 0x18) 11:34:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000050c0)=ANY=[@ANYBLOB="0066871cd308231066f8dbcb05740ff1535eee728de033d2eb6f2dc9c0ef846d2178629cc4eab2eb42fde57cf7b7378dbd14761110a314625c03526d9ee41abc9d34a7584fe8a0bbfbb48db66aa7162ec2f269e2173f"], 0x12, 0x4b4, &(0x7f0000001b00)="$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") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d27e, 0x0) fallocate(r0, 0x0, 0x0, 0xda9b) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 11:34:13 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x1215]}, 0x8) io_uring_enter(r0, 0x34d9, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:34:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x140}, 0x1, 0x0, 0x140}, 0x0) [ 1786.769277][T31344] binder: 31341:31344 ioctl c0306201 0 returned -14 11:34:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) [ 1786.853249][T31350] loop2: detected capacity change from 0 to 512 [ 1786.934708][T31350] EXT4-fs (loop2): 1 orphan inode deleted [ 1786.940836][T31350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1786.956969][T31350] ext4 filesystem being mounted at /root/syzkaller-testdir368001333/syzkaller.NWJ9Fj/1391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1787.034807][ T27] audit: type=1800 audit(1688902453.707:157): pid=31350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=16 res=0 errno=0 [ 1787.120027][ T5062] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:34:14 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000840), 0xffffffffffffffff) 11:34:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:14 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x1215]}, 0x8) io_uring_enter(r0, 0x34d9, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:34:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="00000000200000000000000001000000", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20004040}}, 0x0) 11:34:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:14 executing program 5: unshare(0x42000000) mount$fuseblk(&(0x7f0000000000), 0x0, 0x0, 0x32ec60, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80000000}}], [{@uid_lt={'uid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_lt={'euid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x5}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}]}}) 11:34:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:14 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x1215]}, 0x8) io_uring_enter(r0, 0x34d9, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:34:14 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x0) 11:34:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:14 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x1215]}, 0x8) io_uring_enter(r0, 0x34d9, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:34:14 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x20) 11:34:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:15 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xffffffffffffff51) 11:34:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:16 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2}}], 0x40002db, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x10}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0xffffffff, &(0x7f00000001c0)={&(0x7f0000000880)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) [ 1789.884909][T31406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 11:34:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="00000000200000000000000001000000", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@i_version}, {@quota}]}, 0x3, 0x436, &(0x7f0000000500)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, r0, &(0x7f00000000c0)='!', 0x200000c1}]) 11:34:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40) 11:34:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:17 executing program 5: unshare(0x42000000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 11:34:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1790.387391][T31413] loop3: detected capacity change from 0 to 512 [ 1790.422896][T31413] EXT4-fs: Ignoring removed i_version option 11:34:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1790.482002][T31413] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1790.621393][T31413] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1209: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters 11:34:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1790.684075][T31413] EXT4-fs (loop3): 1 truncate cleaned up [ 1790.689956][T31413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 11:34:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) [ 1790.970089][ T5069] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.647128][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.654217][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 11:34:20 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x11, &(0x7f00000000c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) 11:34:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@i_version}, {@quota}]}, 0x3, 0x436, &(0x7f0000000500)="$eJzs289PHFUcAPDvzAKV/hCs9UdpVbQaiT+g0Ko9eNFo4kETEz3UIwJtsNtiCia2IYrG1KNp4t14NPEv8KQXo55MvOrdNGkMl1ZPa2Z3BpZllwJdWO1+Psm07828zXvfffN235vHBtC1hrN/koj9EfF7RAzUsmsLDNf+u7m8OPX38uJUEpXKW38l1XI3lheniqLF6/blmZE0Iv0siSNN6p2/dPncZLk8czHPjy2cf39s/tLlZ2fPT56dOTtzYeLUqZMnxl94fuK5tsSZxXVj6KO5o4dfe+fqG1Onr77787dJEX9DHG0yvNHFJyqVNlfXWQfq0klPBxvClpQiIuuu3ur4H4hSrHbeQLz6aUcbB+yoSq7F5aUKcAdLotMtADqj+KLP1r/FsXuzj867/lJtAZTFfTM/ald6Is3L9Dasb9tpOCJOL/3zVXbEzjyHAABY4/ts/vNMs/lfGvfXlbs730MZjIh7IuJgRNwbEYci4r6IatkHIuLBLdbfuEmyfv6TXttWYJuUzf9ezPe21s7/itlfDJby3IFq/L3JmdnyzPH8PRmJ3j1ZfnyDOn545bcvWl2rn/9lR1Z/MRfM23GtZ8/a10xPLkzeTsz1rn8SMdTTLP5kZScgiYjDETG0zTpmn/rmaKtrt45/A23YZ6p8HfFkrf+XoiH+QrLx/uTYXVGeOT5W3BXr/fLrlTdb1X9b8bdB1v97m97/K/EPJvX7tfNbr+PKH5+3XNNs9/7vS96upvvycx9OLixcHI/oS16vNbr+/MTqa4t8UT6Lf+RY8/F/MFbfiSMRkd3ED0XEwxHxSN72RyPisYg4tkH8P738+Hvbj39nZfFPb6n/VxN90XimeaJ07sfv1lQ6uJX4s/4/WU2N5Gc28/m3mXZt724GAACA/580IvZHko6upNN0dLT2N/yHYm9anptfePrM3AcXpmu/ERiM3rR40jVQ9zx0PF/WF/mJhvyJ/Lnxl6X+an50aq483engocvtazH+M3+WOt06YMf5vRZ0L+MfupfxD93L+Ifu1WT893eiHcDua/b9/3EH2gHsvobxb9sPuoj1P3Qv4x+6l/EPXWm+P279I3kJiXWJSP8TzZDYoUSnP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa498AAAD//wgz6sQ=") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, r0, &(0x7f00000000c0)='!', 0x200000c1}]) 11:34:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 11:34:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xfffffdef}}, 0x0) 11:34:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="00000000200000000000000001000000", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) [ 1793.709534][T31442] loop3: detected capacity change from 0 to 512 [ 1793.718691][T31442] EXT4-fs: Ignoring removed i_version option [ 1793.729724][T31442] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode 11:34:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 1793.760104][T31442] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1209: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1793.789827][T31442] EXT4-fs (loop3): 1 truncate cleaned up 11:34:20 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) [ 1793.823617][T31442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1793.922679][T31457] binder: 31456:31457 ioctl c0306201 0 returned -14 11:34:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 11:34:20 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x600042, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='\x00', 0x0, r0) [ 1793.983658][T31202] usb 6-1: new high-speed USB device number 30 using dummy_hcd 11:34:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@i_version}, {@quota}]}, 0x3, 0x436, &(0x7f0000000500)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, r0, &(0x7f00000000c0)='!', 0x200000c1}]) [ 1794.072832][ T5069] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1794.133807][T31464] binder: 31462:31464 ioctl c0306201 0 returned -14 [ 1794.234685][T31467] loop3: detected capacity change from 0 to 512 [ 1794.241823][T31467] EXT4-fs: Ignoring removed i_version option [ 1794.251236][T31467] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1794.263795][T31202] usb 6-1: Using ep0 maxpacket: 16 [ 1794.276723][T31467] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1209: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1794.296921][T31467] EXT4-fs (loop3): 1 truncate cleaned up [ 1794.302917][T31467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.448437][ T5069] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1794.523988][T31202] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1794.743861][T31202] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1794.768216][T31202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.800737][T31202] usb 6-1: Product: syz [ 1794.813149][T31202] usb 6-1: Manufacturer: syz [ 1794.825483][T31202] usb 6-1: SerialNumber: syz [ 1794.876004][T31202] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1795.080671][ T5120] usb 6-1: USB disconnect, device number 30 11:34:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}], 0x20}, 0x0) 11:34:22 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_clone3(&(0x7f0000000740)={0x60000000, 0x0, 0x0, 0x0, {0x39}, &(0x7f0000000580)=""/120, 0x78, &(0x7f0000000600)=""/135, 0x0}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000e40)=@ieee802154={0x24, @short}, &(0x7f0000000ec0)=0x80, 0x0) 11:34:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 11:34:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@i_version}, {@quota}]}, 0x3, 0x436, &(0x7f0000000500)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, r0, &(0x7f00000000c0)='!', 0x200000c1}]) 11:34:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:22 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/block/loop0', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) [ 1795.665738][T31476] loop3: detected capacity change from 0 to 512 [ 1795.672424][T31478] binder: 31469:31478 ioctl c0306201 0 returned -14 [ 1795.674541][T31476] EXT4-fs: Ignoring removed i_version option [ 1795.688437][T31476] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode 11:34:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1795.737008][T31476] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1209: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1795.760763][T31476] EXT4-fs (loop3): 1 truncate cleaned up [ 1795.768653][T31476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 11:34:22 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 11:34:22 executing program 5: socketpair(0x0, 0x0, 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000740)={0x60000000, 0x0, 0x0, 0x0, {0x39}, &(0x7f0000000580)=""/120, 0x78, &(0x7f0000000600)=""/135, 0x0, 0x0, {r1}}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000e40)=@ieee802154={0x24, @short}, &(0x7f0000000ec0)=0x80, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:34:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1796.031098][ T5069] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:34:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:34:22 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/power_supply', 0x1c9c0, 0x0) 11:34:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x1c}, 0x1c}}, 0x0) 11:34:23 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x134241) 11:34:23 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 11:34:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) 11:34:24 executing program 2: syz_clone3(&(0x7f0000000740)={0x32000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff], 0x1}, 0x58) 11:34:24 executing program 5: r0 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)=')\'@+\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000780)='dns_resolver\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)=':}#Z@&\x00', r0) request_key(&(0x7f0000000780)='dns_resolver\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)=':}#Z@&\x00', 0x0) 11:34:24 executing program 3: socketpair(0x0, 0x0, 0x7, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000740)={0x60000000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, &(0x7f0000000600)=""/135, 0x0, 0x0, {r1}}, 0x58) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) 11:34:24 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/192, 0xc0) 11:34:24 executing program 2: syz_clone3(&(0x7f00000002c0)={0x4000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 11:34:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) 11:34:24 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @multicast1}}}], 0x38}, 0x0) 11:34:24 executing program 3: syz_clone3(&(0x7f00000002c0)={0x4000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x1}, 0x58) 11:34:24 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop1', 0x0, 0x0) 11:34:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x1, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_0\x00'}) 11:34:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) 11:34:25 executing program 5: add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000001c0)="95", 0x1, 0xfffffffffffffffd) 11:34:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:25 executing program 3: socketpair(0x26, 0x0, 0x0, &(0x7f0000000180)) 11:34:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/vmcoreinfo', 0x0, 0x0) 11:34:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x301}, 0x14}}, 0x0) 11:34:26 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x181840, 0x0) 11:34:26 executing program 3: request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000040)='*\vF\xc4<\xfe\xd2\xd6\b<\x1b\xa4m\xaa\xed\xd9\xef\xb1\x81\xd8\xb4\xccn\xffw\xa2\x80^>\xb1\x90a\x9b\xa7\x85\x1c\xde\xfd\x88\x96\x89\xd8\a\xf0Z?\x0e\x94\xa0\xebu\xf3yJ\x92\xaa3\x7fc\x98!\x17\x8e\xa7\xd0\x96}\'m\xeeC\x01\xa7\xbe\xac\xcdf\x06G\xfc\xfe\xcdJR\xbd\xff\xaf\xe0%3na\x99\x98\xc8z\x80\xe6\xd9\x912\xb1[\xe1\xb9\xe3\xa8 \xb9\xb6\fM\xd5n\x80\x9b-\x16ik\xa8\xcb+\xf4\x84Bk\x88\x0e\xa8\xc4Z\x91\xdb8V\r\xa6\x02Q\x11\xc7p&wF@\xa2i\xbf\x8a\xbd\xcc+\xbd\xf3f\a-1\xee', 0xfffffffffffffffe) 11:34:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) 11:34:26 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/vmcoreinfo', 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, 0x0) 11:34:27 executing program 5: syz_open_dev$vcsa(&(0x7f0000000340), 0x8000000000000000, 0x0) 11:34:27 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_0\x00'}) 11:34:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) 11:34:27 executing program 2: syz_clone3(&(0x7f0000000280)={0x200000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:34:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x1, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 11:34:27 executing program 3: socket$inet(0x2, 0x0, 0x80000001) 11:34:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) 11:34:27 executing program 5: syz_clone3(&(0x7f0000001480)={0x801c00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:34:27 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 11:34:28 executing program 2: socketpair(0x0, 0x0, 0x7, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000740)={0x60000000, 0x0, 0x0, 0x0, {0x39}, &(0x7f0000000580)=""/120, 0x78, &(0x7f0000000600)=""/135, 0x0, 0x0, {r1}}, 0x58) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) [ 1801.333163][T31593] binder: BINDER_SET_CONTEXT_MGR already set [ 1801.355567][T31593] binder: 31588:31593 ioctl 4018620d 20000000 returned -16 11:34:28 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @multicast1}}}], 0x38}, 0x24040015) 11:34:28 executing program 4: add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 11:34:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000580)=""/120, 0x78, &(0x7f0000000600)=""/135, 0x0, 0x0, {r1}}, 0x58) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, 0x0, 0x10, 0x70bd25, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:34:28 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x0, 0x0) 11:34:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:29 executing program 3: setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x10100, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xffff, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x218, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7f, 0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x4, 0x0, [0x658, 0x8ed, 0x6, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0xaf4, 0x2, 0x8, 0x6, 0xd7, 0x6264, 0x800], 0xe}}, @common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e21], [0x4e23, 0x4e23], 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@mcast2, @mcast2, [0x0, 0xff, 0xff, 0xff000000], [0x0, 0xffffff00, 0x0, 0xff000000], 'batadv_slave_1\x00', 'pimreg\x00', {}, {}, 0x0, 0x69, 0x0, 0x20}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3c, 0x4, 0x20, 0x3, 0x24d}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'veth1_to_bridge\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 11:34:29 executing program 4: lsetxattr$trusted_overlay_redirect(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x8, 0x3) 11:34:29 executing program 2: socket$inet6(0xa, 0x5, 0x9) 11:34:29 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) write$tun(r0, 0x0, 0x11) 11:34:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x1, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:29 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) connect$802154_dgram(r0, 0x0, 0x0) [ 1803.018682][T31626] x_tables: duplicate underflow at hook 2 11:34:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 11:34:29 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 11:34:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x274ce450e2970294, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 11:34:29 executing program 3: syz_open_dev$usbmon(&(0x7f0000000140), 0x1f, 0x24201) 11:34:29 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0/file0\x00', 0x800) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getuid() mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e733d7463702c7038000000307830b7a53030303030303030300000000032315771645848fe72c978303030303030303030303030303039382c6d6d61702c64666c74", @ANYRESHEX=r6, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623", @ANYBLOB=',uid', @ANYRESDEC=r7, @ANYBLOB, @ANYRESDEC]) [ 1803.507812][T31649] hub 5-0:1.0: USB hub found [ 1803.514285][T31649] hub 5-0:1.0: 1 port detected 11:34:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:32 executing program 3: syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x24201) 11:34:32 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0/file0\x00', 0x800) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getuid() mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e733d7463702c7038000000307830b7a53030303030303030300000000032315771645848fe72c978303030303030303030303030303039382c6d6d61702c64666c74", @ANYRESHEX=r6, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623", @ANYBLOB=',uid', @ANYRESDEC=r7, @ANYBLOB, @ANYRESDEC]) 11:34:32 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0/file0\x00', 0x800) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getuid() mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e733d7463702c7038000000307830b7a53030303030303030300000000032315771645848fe72c978303030303030303030303030303039382c6d6d61702c64666c74", @ANYRESHEX=r6, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623", @ANYBLOB=',uid', @ANYRESDEC=r7, @ANYBLOB, @ANYRESDEC]) 11:34:32 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1002]}, 0x8) 11:34:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:32 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x100078}, 0x20) 11:34:32 executing program 5: socket(0x1, 0x4, 0x80) [ 1806.173952][T31666] hub 5-0:1.0: USB hub found [ 1806.178986][T31666] hub 5-0:1.0: 1 port detected 11:34:34 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0/file0\x00', 0x800) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getuid() mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e733d7463702c7038000000307830b7a53030303030303030300000000032315771645848fe72c978303030303030303030303030303039382c6d6d61702c64666c74", @ANYRESHEX=r6, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623", @ANYBLOB=',uid', @ANYRESDEC=r7, @ANYBLOB, @ANYRESDEC]) 11:34:34 executing program 3: readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/44, 0x2c) 11:34:34 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0/file0\x00', 0x800) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getuid() mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e733d7463702c7038000000307830b7a53030303030303030300000000032315771645848fe72c978303030303030303030303030303039382c6d6d61702c64666c74", @ANYRESHEX=r6, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623", @ANYBLOB=',uid', @ANYRESDEC=r7, @ANYBLOB, @ANYRESDEC]) 11:34:34 executing program 5: select(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) [ 1808.040398][T31683] hub 5-0:1.0: USB hub found [ 1808.045820][T31683] hub 5-0:1.0: 1 port detected [ 1808.870717][T31685] hub 5-0:1.0: USB hub found [ 1808.876099][T31685] hub 5-0:1.0: 1 port detected 11:34:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:36 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0/file0\x00', 0x800) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getuid() mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e733d7463702c7038000000307830b7a53030303030303030300000000032315771645848fe72c978303030303030303030303030303039382c6d6d61702c64666c74", @ANYRESHEX=r6, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623", @ANYBLOB=',uid', @ANYRESDEC=r7, @ANYBLOB, @ANYRESDEC]) 11:34:36 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0/file0\x00', 0x800) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = getuid() mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e733d7463702c7038000000307830b7a53030303030303030300000000032315771645848fe72c978303030303030303030303030303039382c6d6d61702c64666c74", @ANYRESHEX=r6, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623", @ANYBLOB=',uid', @ANYRESDEC=r7, @ANYBLOB, @ANYRESDEC]) 11:34:36 executing program 3: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xd62]}, 0x8}) [ 1810.643980][T31698] hub 5-0:1.0: USB hub found [ 1810.655376][T31698] hub 5-0:1.0: 1 port detected 11:34:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:38 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) write$tun(r0, &(0x7f0000001680)=ANY=[], 0x1016) 11:34:39 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 11:34:39 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) syz_clone3(&(0x7f0000000cc0)={0x48121000, &(0x7f0000000840), &(0x7f0000000880), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getuid() r0 = getuid() quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r0, 0x0) getuid() geteuid() 11:34:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:34:39 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 11:34:39 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x100071, 0x120000}, 0x20) 11:34:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) 11:34:40 executing program 4: getpgid(0x0) getpid() syz_clone3(&(0x7f00000044c0)={0x40800000, 0x0, 0x0, &(0x7f0000003f00), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 11:34:40 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) 11:34:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:40 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 11:34:40 executing program 5: r0 = syz_clone(0x0, &(0x7f0000000000)="34c68f328514ce46454229e3832e574b5494357a048abe02b586ea0a891f9c163196136f5289a7d5ab9c00f2c8c547675f99f274d3643a543e6529cd7f5cc491a832b411a835e89d66e5577c214b64abb258754ad65899b603c8f37927779d0e84b212c73bfbac856cc3c550354798ff3fad6a153d3292a5bb6659d883242ee9bc73ebe2fc51f37437821c24c0dea6300091c64952f90dbb57bd3ae3d221093943ad214cc8bf3d201a57de3475bfab3c9f7d7ea611805f", 0xb7, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="99313b7096ed8055f3b30752ce3715470a2c6942e7e31eee776cf58704196d01a820aeb80eb19777f8df539229e5ed142041e8bcd240835b7e654e4d89906d0bf092e9cfc5ca5b95bca9c01d6e2b7a586fb81d07e49731ce4a143b62c2bb05b8fee9524fc4e430e57e122ad65198360cba7c18b3936360cf1b5ee319c8ec739c7045edf7d9eb537c20e0644008d7735cd1de6b1c14b0d7a3fccf0ff107a32843456e05d4c272c17931460f5c2e509d7a9d40233153dd7a897bc6a59a") ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) r1 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)='\\') sched_getparam(r1, &(0x7f0000000480)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000084) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000940)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x0, 0x5004) syz_open_procfs$namespace(r1, &(0x7f0000000980)='ns/cgroup\x00') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000009c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x15}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff, 0xe93f, 0x3, 0x0, 0x0, 0x4000000}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, 0x0, 0x100, 0x0, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11:34:40 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x100078, 0x0, 0x120000}, 0x20) 11:34:40 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 11:34:40 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) 11:34:40 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x254040, 0x0) 11:34:40 executing program 4: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000100)) 11:34:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:42 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x443, 0x0) 11:34:42 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={'virt_wifi0\x00', {0x2, 0x0, @remote}}) 11:34:42 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, @remote, @loopback}) 11:34:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x274ce450e2970294}, 0x48) 11:34:43 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) getrlimit(0x3, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11:34:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000013c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 11:34:43 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 11:34:43 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x218, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}}, @common=@inet=@dccp={{0x30}, {[0x0, 0x4e21]}}]}, @REJECT={0x28}}, {{@ipv6={@mcast2, @mcast2, [], [], 'batadv_slave_1\x00', 'pimreg\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'veth1_to_bridge\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 11:34:43 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x0, 0x0, 0x0) open_tree(r0, &(0x7f0000000380)='./file0/file0/file0\x00', 0x800) statx(0xffffffffffffffff, &(0x7f0000000600)='./file0/file0/file0\x00', 0x6000, 0x80, &(0x7f0000000500)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, '\x00', [{}, {0xffffffff}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x400) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@file={0x0, './file0/file0/file0\x00'}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="ce45590bd91b2ab0178915a3297fa9c4e2b140552bfa5cb53a8e31aad1b12a487c193bcf0ee310bdb41b7ad633d621f06d18192fd82b4ee526812664a86a0b3aecc4209b8c7c1f5fd6a8dc49c9e752d6682dffa66d951aa0dc26ce017c3cc101496389072305615fc18abb64213987a395e2114061913ef49f80f0114796e90840bc911c6ce48400e80f8dee360d32c77525c7b693254e20f872bd47037cee0c56982eda07f8df9e0a8da65e4b4163d9c8f2a5e6c41f0b3a9653cc48de41b112e483f919f548e6835e552514d15320", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r5, @ANYRES8, @ANYRES64, @ANYRES64, @ANYBLOB="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"], 0x40, 0x881}}], 0x1, 0x0) getuid() 11:34:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000000)=@framed={{}, [@map_idx, @call]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), 0x10}, 0x80) [ 1816.967989][T31784] x_tables: duplicate underflow at hook 2 11:34:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "efc343"}) 11:34:44 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000180)=0x6e) 11:34:44 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x218, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}}, @common=@inet=@dccp={{0x30}, {[0x0, 0x4e21]}}]}, @REJECT={0x28}}, {{@ipv6={@mcast2, @mcast2, [], [], 'batadv_slave_1\x00', 'pimreg\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'veth1_to_bridge\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 1817.839271][T31791] x_tables: duplicate underflow at hook 2 11:34:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:45 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) accept$inet6(r0, 0x0, 0x0) 11:34:45 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execve(0x0, 0x0, 0x0) 11:34:45 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x218, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}}, @common=@inet=@dccp={{0x30}, {[0x0, 0x4e21]}}]}, @REJECT={0x28}}, {{@ipv6={@mcast2, @mcast2, [], [], 'batadv_slave_1\x00', 'pimreg\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'veth1_to_bridge\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 11:34:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:45 executing program 5: openat$incfs(0xffffffffffffffff, &(0x7f0000000700)='.pending_reads\x00', 0x0, 0x0) 11:34:45 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x2, &(0x7f0000000240)=@raw=[@initr0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:34:45 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @private0}, 0x1c) [ 1818.640653][T31805] x_tables: duplicate underflow at hook 2 11:34:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:46 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x218, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}}, @common=@inet=@dccp={{0x30}, {[0x0, 0x4e21]}}]}, @REJECT={0x28}}, {{@ipv6={@mcast2, @mcast2, [], [], 'batadv_slave_1\x00', 'pimreg\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'veth1_to_bridge\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 11:34:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c}, 0x1c}}, 0x0) 11:34:46 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop1', 0x1831c0, 0x0) [ 1819.595417][T31820] x_tables: duplicate underflow at hook 2 [ 1819.893744][ T5077] Bluetooth: hci0: command 0x0401 tx timeout 11:34:47 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@dev, @dev, @val={@void}, {@mpls_mc={0x8848, {[], @ipv6=@tcp={0x0, 0x6, "ed8308", 0x14, 0x6, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x0) 11:34:47 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="620af8ff25200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415bd1966118b64f751a0f241b072e90080008002d7560593a286cecc93e64c227c95aa0b7845e6b607130c89f18c0c1089d8b853289d01aa27ae82e61b0f9223684198e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364145835108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000000000000c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3c39c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e68242aff9fa740b5b7632f32030916f89c6dad7603f2ba29290d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000009711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b000020435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870c1f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d6df0042e36acd37d7f9e119f2c06f815312e92528e8c6ef59da8033049f9910cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502fb000000c71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ece0ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f3014216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef0100f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449ff9a083dbd334b47f067bbab405c3b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288c7226bbd9c9e9e1cc9eb3d5403407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225f030000000000000047d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933bee24c7e8000f2c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e000000000000037010632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127cf72748a028daf5fc4d4e6d5265bec44219ee8fbfe86f441c724fa7b3d1ff0555e63ad00a1c7f9f9af10154f1e109dc3f7dd87ea308a1fb5a983490c6c93610864623613dabec4c0b64461d21f807515d8fadec636c99aa95ff895c25aad5ac0993a65c7668ca2b6d46edbad410df7390d27ec8199259b8e3dd36de9b35ce25d39686f2470afb1b1db18221841cee6e5531280d65f1d28886e0f06856a5ca37a91ea6e19977c517b10fb66858a05b03084d1f3bd5542d2796a33cfe545be3dc03d302e4839492cdc7694142e48f23271787d3a2360996ca3c9b18000000000700000000000000000000004882ce2e7a68512b23b0ab1f7a6c960b0000000000396d64cea0aa0cbac8f8c3e86da52bf2734027b96a12e5718d4e27f061081eb78befa5fd2367de9f1bd721bb64f174899c7c69b51446b39387e0e01c4a74cb13c906a269fcc71b69ee190d1a105c43"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = epoll_create(0x6) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) 11:34:47 executing program 5: socket$inet6(0xa, 0x0, 0x400) 11:34:47 executing program 2: syz_emit_ethernet(0x16, &(0x7f0000000880)={@remote, @random="2b4a3256a432", @void, {@llc={0x4, {@snap={0x0, 0x0, "e1", "089ca8"}}}}}, 0x0) 11:34:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:47 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @private0}, 0x1c) 11:34:47 executing program 5: pselect6(0x40, &(0x7f0000000040)={0x5}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffffff]}, 0x8}) 11:34:47 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 11:34:47 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) 11:34:47 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) 11:34:47 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x11) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) write$tun(r1, &(0x7f0000001b00)={@val, @val, @llc={@llc={0x0, 0x0, '&'}}}, 0x11) 11:34:47 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="620af8ff25200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0cf62caa04eec78a0d9400e693146cea484a415bd1966118b64f751a0f241b072e90080008002d7560593a286cecc93e64c227c95aa0b7845e6b607130c89f18c0c1089d8b853289d01aa27ae82e61b0f9223684198e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc21dee510cb2364145835108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000000000000c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3c39c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e68242aff9fa740b5b7632f32030916f89c6dad7603f2ba29290d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000009711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b000020435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b41216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870c1f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d6df0042e36acd37d7f9e119f2c06f815312e92528e8c6ef59da8033049f9910cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502fb000000c71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ece0ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024bd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f3014216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f9310064953c4af4e9ba1b29abb2cedfc2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef0100f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66413ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449ff9a083dbd334b47f067bbab405c3b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288c7226bbd9c9e9e1cc9eb3d5403407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a1eb26c961ea168bfd36548632c0dd2b454c832e45b2569dc0d90b075225f030000000000000047d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933bee24c7e8000f2c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e000000000000037010632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127cf72748a028daf5fc4d4e6d5265bec44219ee8fbfe86f441c724fa7b3d1ff0555e63ad00a1c7f9f9af10154f1e109dc3f7dd87ea308a1fb5a983490c6c93610864623613dabec4c0b64461d21f807515d8fadec636c99aa95ff895c25aad5ac0993a65c7668ca2b6d46edbad410df7390d27ec8199259b8e3dd36de9b35ce25d39686f2470afb1b1db18221841cee6e5531280d65f1d28886e0f06856a5ca37a91ea6e19977c517b10fb66858a05b03084d1f3bd5542d2796a33cfe545be3dc03d302e4839492cdc7694142e48f23271787d3a2360996ca3c9b18000000000700000000000000000000004882ce2e7a68512b23b0ab1f7a6c960b0000000000396d64cea0aa0cbac8f8c3e86da52bf2734027b96a12e5718d4e27f061081eb78befa5fd2367de9f1bd721bb64f174899c7c69b51446b39387e0e01c4a74cb13c906a269fcc71b69ee190d1a105c436b23128f8a427d29bab6448e2f894434250a6e468ee0ed2b27779c783d2b085630fd695904e4ccacda666c4744a6e615fc04b5daccd1ba604bcb7095f7b638c6b398e676c96f2bf9bae56821b9ea619de3db335d4ba5e67344312a36b49c661ca0f0b36306acc8fee1dcc3a3cb3519338a36ad5f528e720a05be5783e66f0eb32799c057b1ccfa51425c03fb8c1577c313480d832df43674e14e80c0e9056d9229001c20198980350d23d9d5e3f7a1b5ddcae6bcf213da6ec9995e01b6f63d6bec594f42535263a061fc0e8e0922be65f401346c50ab126e32f3a784d92693c5529e6c0945f48b321b1bd611666a52f8c49433359dc70f167f99939b84e4ed132cf24b66995095a71dfdcb91e30761dda07b53b7f386d3bb9e8c543328ace81c85ca612d758f82e24c7afb60470a36556d9e73ab161d1b13a52dc9bb3ee372b02d584a7c482ba01f25f1501ae7781fed274cb450014840a76e766a1d521796e39cd29d26dce7a4b8fb01784a4c34902141b4a0668b65e374f89aee339f060b4e45179a738ed82e2e558fab82fe8c87fa0e0ee745869e2b9e75a4978144a5b1d886859e9baa035a953371ac40b71a225c6e8dd63532c26570ea3c748cd5b7eafd710a124d4c07f34c7d0d66701b1976f6f932953611c215345a3eb0ad5c07b71712443d4861e7507e21e2e9d556aa21a9f984740fe7a29dd4dc2afc33ad77a11aaa596c0beffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x10) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f00000001c0)={[0x2]}, 0x8) 11:34:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:47 executing program 5: readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/39, 0x27) 11:34:47 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@map_idx]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x80) 11:34:47 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) write$tun(r0, &(0x7f0000001b00)={@val, @val, @llc={@llc={0x0, 0x0, '&'}}}, 0x11) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x8) 11:34:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:48 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001440), 0x140, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001b00)={@val, @val, @llc={@llc={0x0, 0x0, '&'}}}, 0x11) clock_gettime(0x5, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0x7, 0x2, 0x4, 0x2, 0x80000001, 0xce, 0x2, 0x3}, &(0x7f00000000c0)={0x5, 0x100000000, 0x81, 0x0, 0x4, 0x0, 0x7f}, 0x0, &(0x7f0000000180)={0x0}) 11:34:48 executing program 3: openat$bsg(0xffffffffffffff9c, 0x0, 0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001440), 0x140, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001300)={0x0, 0x9, 0x0, 0x7be}, 0x10, 0x2bf88}, 0x80) 11:34:48 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) 11:34:48 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) 11:34:48 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1}) 11:34:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x9, &(0x7f0000000000)=@framed={{}, [@map_idx, @call, @cb_func, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:48 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'gre0\x00', {0x2, 0x0, @loopback}}) 11:34:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:49 executing program 4: syz_open_dev$usbmon(&(0x7f0000000080), 0x9, 0x0) 11:34:49 executing program 5: openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x220800, 0x0) 11:34:49 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000013c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000001400)) 11:34:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000000)=@framed={{}, [@call, @cb_func, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000000)=@framed={{}, [@call, @cb_func]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) getrlimit(0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001340)=ANY=[@ANYBLOB="61155000000000006113500000000000bfa000000000000014000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350307000fff07206706000002000000160300000ee60060bf050000000000005f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901dd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2b60070b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddcfded41f6e2520a211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d73fcc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8010000007f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc20100000029b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e04b6f0275866d1a1d1c761e2c29ff6630b7c4b317bbfa70e46829dcab474178da43aacd93bdb91972dba18c8115e61529cd7c42304523c8db521d17330f8a14490f568391524419cb539c26657c38bde412ee11d52bba48cf455509e25b0a3f3877737120ab9c1ed5952c824596010cb25678b79f081c446bb4136ec1dea66a6aad694f7702c393c61e38f188a59eb808f555e4"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 11:34:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:50 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000000), 0x0) 11:34:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@map_idx, @call, @cb_func]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='team_slave_0\x00') 11:34:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:50 executing program 2: setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) 11:34:50 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x418083, 0x0) 11:34:50 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100081}, 0x20) 11:34:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) 11:34:51 executing program 4: syz_emit_ethernet(0xe9, 0x0, 0x0) 11:34:51 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000001cc0)={0x8, 'pimreg1\x00', {'netdevsim0\x00'}}) 11:34:51 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001440), 0x140, 0x0) 11:34:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:51 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) read$usbmon(r0, 0x0, 0x0) 11:34:51 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x46080, 0x0) 11:34:51 executing program 2: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1}, &(0x7f00000000c0)={0x77359400}) 11:34:52 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 11:34:52 executing program 5: setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 11:34:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ef"], 0x14}}, 0x0) 11:34:52 executing program 5: socket(0x1d, 0x0, 0x9) 11:34:52 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 11:34:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x2, &(0x7f0000000040)=@raw=[@btf_id], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:34:52 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x41, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 11:34:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:53 executing program 4: add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) 11:34:53 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 11:34:53 executing program 5: socketpair(0x26, 0x5, 0x8000, &(0x7f00000000c0)) 11:34:53 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xf, 0x0, 0x0) 11:34:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5}, {}]}, 0x10) 11:34:53 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 11:34:53 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x22, &(0x7f0000000000)={@empty, @private, 0x0, "0e41a2002d672b81b18a9c0fc369ab99f027b1038d80e33f5f1695a292306e2f"}, 0x3c) 11:34:53 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000080)={0x0, 0x0, 0x140000}, 0x20) 11:34:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@loopback, @mcast2, @loopback, 0x0, 0x80}) 11:34:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB=';J'], 0x20) 11:34:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:54 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040)={0x2}, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 11:34:54 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xcd, &(0x7f0000000000)={@empty, @private, 0x0, "0e41a2002d672b81b18a9c0fc369ab99f027b1038d80e33f5f1695a292306e2f"}, 0x3c) 11:34:54 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x2, 0xd2, 0x0, 0x0) 11:34:54 executing program 5: add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "5e6dc1661064965fe905e16e7f299be64fb3015cf3299441becfa6f3ab714c3ceb9b0ff1baead1f61c4e648e62658a7267a4608041d788ef6645c85e5640e30c"}, 0x48, 0xfffffffffffffffb) 11:34:54 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc3}, &(0x7f0000000700)={0x0, "bca5f083d4eb49686e512f966d26bcf4c51bdaa9e877344778a8bf31b952957077ff192c8551490ec603baff33db9bec7c0a16b6cc4b7cfd69141ea6e4a5441a"}, 0x48, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000580), 0x0, 0x0, 0x0, r0) 11:34:54 executing program 3: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x6b02c1}, 0x18) 11:34:54 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) 11:34:54 executing program 5: io_setup(0xf9c, &(0x7f0000000040)=0x0) io_setup(0xf9e, &(0x7f0000000000)=0x0) io_destroy(r1) io_destroy(r0) 11:34:54 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000280)={0x0, "c8200f36df45d0cad55d46b22817947d4f36dc61957db4429a4e9323790348f12b5322cf749c151497a3787b7911c1b2db1f17e30b4da00a7a2106164c0b6561"}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x11, r0, &(0x7f0000000240)=""/70, 0x46) 11:34:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:55 executing program 2: openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0x1}, 0x18) 11:34:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6}]}, 0x10) 11:34:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:55 executing program 3: io_setup(0xf9e, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000100)="541c92bc92ba", 0x6}]) 11:34:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x1, &(0x7f0000000140)=@raw=[@ldst], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:34:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x20}]}, 0x10) 11:34:55 executing program 5: setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000001840), 0x4) io_setup(0xf9c, &(0x7f0000000040)) 11:34:55 executing program 4: r0 = socket(0x11, 0xa, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 11:34:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5}]}, 0x10) 11:34:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) 11:34:55 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @dev}, 0x10) 11:34:56 executing program 3: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x2, 0x8000033, 0xffffffffffffff9c, 0x0) 11:34:56 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x12, 0x0, 0x0) 11:34:56 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@empty, @private, 0x0, "0e41a2002d672b81b18a9c0fc369ab99f027b1038d80e33f5f1695a292306e2f"}, 0x3c) 11:34:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:56 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40010002, 0x0, 0x0) 11:34:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:56 executing program 5: add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000280)={0x0, "c8200f36df45d0cad55d46b22817947d4f36dc61957db4429a4e9323790348f12b5322cf749c151497a3787b7911c1b2db1f17e30b4da00a7a2106164c0b6561"}, 0x48, 0xffffffffffffffff) 11:34:56 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0x31, 0x0, 0x0) 11:34:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x7f}) 11:34:57 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:34:57 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) accept(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r4}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x9, 0x400, @vifc_lcl_ifindex=r4, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 11:34:57 executing program 2: io_setup(0xf9e, &(0x7f0000000000)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 11:34:57 executing program 3: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) [ 1830.478231][T32058] wg2: entered allmulticast mode 11:34:57 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000200)) 11:34:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x734, 0xffffffffffffffff, 0x46, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) 11:34:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:34:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x20}]}, 0x10) 11:34:58 executing program 2: add_key$fscrypt_v1(&(0x7f0000000300), 0x0, &(0x7f0000000380)={0x0, "5e6dc1661064965fe905e16e7f299be64fb3015cf3299441becfa6f3ab714c3ceb9b0ff1baead1f61c4e648e62658a7267a4608041d788ef6645c85e5640e30c"}, 0x48, 0xfffffffffffffffb) 11:34:58 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 11:34:58 executing program 4: io_setup(0x8, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) io_pgetevents(r0, 0x7, 0x7, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x0, r1+10000000}, 0x0) 11:34:58 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x100) 11:34:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:34:58 executing program 2: io_setup(0xf9e, &(0x7f0000000000)) io_setup(0x3918, &(0x7f0000000040)=0x0) io_destroy(r0) 11:34:58 executing program 5: io_setup(0xf9e, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 11:34:58 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000005c40), 0x400, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000a40)={@mcast1}, 0x14) 11:34:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x0, @loopback}}) 11:34:58 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@remote, @multicast1}, 0x10) [ 1832.178220][T32098] lo: entered allmulticast mode 11:35:00 executing program 3: io_setup(0x2, &(0x7f0000000200)=0x0) io_destroy(r0) 11:35:00 executing program 2: io_setup(0xf9e, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f00000027c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) 11:35:00 executing program 5: openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80c42, 0x0, 0x10}, 0x18) 11:35:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x7, 0x20}]}, 0x10) 11:35:00 executing program 4: socket$inet(0x2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f000000d280), 0xffffffffffffffff) socket$inet(0x2, 0xa, 0x512cd71a) 11:35:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00', 0xfffffffd}) ioctl(r0, 0x8b20, &(0x7f0000000040)) 11:35:00 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0}) clock_settime(0x0, &(0x7f0000000100)={r0}) 11:35:00 executing program 5: socket$inet(0x2, 0x0, 0x512cd71a) [ 1833.741213][T32117] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 11:35:00 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) 11:35:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00', 0xfffffffd}) ioctl(r0, 0x8b20, &(0x7f0000000040)) 11:35:00 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@empty, @empty, 0x0, "36727ae307cba1119bb853a94e04c7b90a14529816ba2f650c49061c9b50008d"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 11:35:00 executing program 4: openat$sndseq(0xffffffffffffff9c, 0x0, 0x121200) [ 1833.916993][T32127] lo: left allmulticast mode [ 1833.973668][T32127] wg2: left allmulticast mode 11:35:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0xffff, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) 11:35:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00', 0xfffffffd}) ioctl(r0, 0x8b20, &(0x7f0000000040)) 11:35:01 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) 11:35:01 executing program 3: socket$inet(0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f000000d3c0)={'ip6tnl0\x00', 0x0}) socket$inet6(0xa, 0x3, 0x3) 11:35:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00', 0xfffffffd}) ioctl(r0, 0x8b20, &(0x7f0000000040)) 11:35:01 executing program 4: socket$inet(0x2, 0x1, 0x8) 11:35:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000dc0)={'syztnl0\x00', 0x0}) 11:35:02 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000001480), 0x20240, 0x0) 11:35:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\\}\x00'}) 11:35:02 executing program 4: syz_clone3(&(0x7f0000000cc0)={0x208a5000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:35:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000080)=""/101, &(0x7f0000000100)=0x65) 11:35:04 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x121200) 11:35:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 11:35:04 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x80c00, 0x0) 11:35:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0xb, 0x0, &(0x7f0000001b00)) 11:35:04 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000006200)={0xa0000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000061c0)=[r0], 0x1}, 0x58) 11:35:04 executing program 2: syz_mount_image$fuse(&(0x7f0000002300), 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x0, 0x0) 11:35:04 executing program 5: sched_setattr(0x0, &(0x7f00000003c0)={0x38}, 0x0) 11:35:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x15, 0x0, &(0x7f0000001b00)) 11:35:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000440)={0x5, {{0x2, 0x4e22, @multicast2}}}, 0x88) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x5421, 0x0) 11:35:04 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xffffffffffffff95) 11:35:04 executing program 4: capset(&(0x7f0000000100), 0x0) 11:35:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 11:35:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x8, {{0x2, 0x0, @multicast2}}}, 0x88) 11:35:05 executing program 4: open_tree(0xffffffffffffffff, 0x0, 0x16d273efff7aebad) 11:35:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:05 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone3(&(0x7f0000000500)={0x200000, 0x0, &(0x7f0000000340), 0x0, {0x1a}, 0x0, 0x0, &(0x7f0000000480)=""/15, 0x0}, 0x58) 11:35:05 executing program 5: semop(0x0, &(0x7f00000001c0)=[{0x3}], 0x1) 11:35:05 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000006cc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=tcp,', {}, 0x2c, {[], [{@context={'context', 0x3d, 'system_u'}}]}}) 11:35:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0xf, 0x0, 0x0) 11:35:06 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_clone3(&(0x7f0000001880)={0xdb082000, 0x0, &(0x7f0000000240), 0x0, {}, &(0x7f0000000880)=""/4096, 0x1000, 0x0, 0x0}, 0x58) 11:35:06 executing program 4: getresuid(&(0x7f0000002100), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f00000023c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000009300), 0xffffffffffffffff) [ 1839.851282][T32219] 9pnet_fd: p9_fd_create_tcp (32219): problem connecting socket to 127.0.0.1 11:35:06 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f00000023c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {}, {@allow_other}]}}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11:35:06 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone3(&(0x7f0000000500)={0x200000, 0x0, &(0x7f0000000340), 0x0, {0x1a}, 0x0, 0x0, &(0x7f0000000480)=""/15, 0x0}, 0x58) [ 1840.009339][T32231] fuse: Bad value for 'fd' 11:35:06 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x80086601, 0x0) 11:35:06 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x4020940d, 0x0) 11:35:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:08 executing program 5: ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) socket$inet(0x2, 0x4, 0x7f) syz_clone3(&(0x7f0000000500)={0x200000, &(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000380), {}, &(0x7f00000003c0)=""/178, 0xb2, 0x0, &(0x7f00000004c0)=[0x0, 0x0], 0x2}, 0x58) 11:35:08 executing program 4: syz_clone3(&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf, 0x0, 0x0, 0x2000}, 0x99) 11:35:08 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone3(&(0x7f0000000500)={0x200000, 0x0, &(0x7f0000000340), 0x0, {0x1a}, 0x0, 0x0, &(0x7f0000000480)=""/15, 0x0}, 0x58) 11:35:08 executing program 3: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 11:35:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@private, 0x0, 0x33}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0xb4}}, 0xe8) 11:35:08 executing program 4: r0 = eventfd(0x1f02) read$eventfd(r0, &(0x7f0000001040), 0x8) write$eventfd(r0, &(0x7f0000000180), 0x8) 11:35:08 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone3(&(0x7f0000000500)={0x200000, 0x0, &(0x7f0000000340), 0x0, {0x1a}, 0x0, 0x0, &(0x7f0000000480)=""/15, 0x0}, 0x58) 11:35:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3fd2}]}) 11:35:08 executing program 3: syz_clone3(&(0x7f0000000200)={0x44100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:35:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xaa, 0x9}) 11:35:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x17, 0x0, &(0x7f0000001b00)) 11:35:10 executing program 2: io_setup(0x1000, &(0x7f0000000000)) 11:35:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000001c00), 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x0) 11:35:10 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') preadv(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000240)=""/210, 0xd2}], 0x2, 0x3, 0x0) 11:35:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:10 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/custom0\x00', 0x2, 0x0) 11:35:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, 0x0, 0x0) 11:35:10 executing program 3: syz_clone(0xa82c8da00298cb2c, 0x0, 0x0, 0x0, 0x0, 0x0) 11:35:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:10 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ec0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)="1e"}) 11:35:10 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x0, 0x1800}, {0x0, 0x6}, {}], 0x3, 0x0) 11:35:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_BTRFS_WITHOUT_PARENT={0x28}, 0x0) 11:35:10 executing program 5: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fchmod(r0, 0x0) 11:35:10 executing program 2: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x20, &(0x7f0000000200)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) 11:35:10 executing program 4: pselect6(0x0, 0xfffffffffffffffc, 0x0, 0x0, &(0x7f00000000c0), 0x0) 11:35:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@private}, 0x0, @in6=@private1}}, 0xe8) 11:35:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:11 executing program 2: getresuid(&(0x7f0000002100), 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f00000023c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000009300), 0xffffffffffffffff) 11:35:11 executing program 5: read$FUSE(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000002100), 0x0, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4080, &(0x7f00000021c0)={'trans=tcp,', {}, 0x2c, {[{@nodevmap}, {@fscache}, {@version_u}, {@dfltuid}], [{@subj_role={'subj_role', 0x3d, '/d'}}, {@dont_appraise}, {@measure}, {@uid_eq}]}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f00000023c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {@allow_other}, {@allow_other}, {}, {@allow_other}, {@allow_other}]}}, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000004640)={0x20}, 0x20) read$FUSE(r0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000006c80), &(0x7f0000006cc0)='./file0\x00', 0x0, &(0x7f0000006d00)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@default_permissions}], [{@permit_directio}]}}, 0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000006fc0), 0x4940, 0x0) mount$fuse(0x0, &(0x7f0000007080)='./file0/../file0\x00', &(0x7f00000070c0), 0x0, &(0x7f0000009140)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000009300), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f000000b3c0)={0x18}, 0x18) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) 11:35:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x15, 0x0, 0x0) [ 1845.609486][T32317] fuse: Bad value for 'fd' [ 1845.622138][T32320] fuse: Bad value for 'fd' [ 1845.641780][T32320] fuse: Bad value for 'fd' [ 1845.694694][T32320] fuse: Bad value for 'fd' 11:35:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040)=0xa12, 0x4) 11:35:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x2, 0x0, 0x0, 0x0) 11:35:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @dev, 0x0, 0x0, 'pim6reg\x00', 'pim6reg\x00', {}, {}, 0x0, 0x7}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@dev, @dev, 0x0, 0x0, 'pimreg0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 11:35:12 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') 11:35:12 executing program 3: mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:35:12 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000580)={0xffffffffffffffff, 0x2, 0xfffff838}) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone3(&(0x7f0000000500)={0x200000, 0x0, &(0x7f0000000340), 0x0, {}, &(0x7f00000003c0)=""/178, 0xb2, 0x0, &(0x7f00000004c0)=[0x0, 0x0], 0x2}, 0x58) 11:35:12 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1e}) 11:35:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000200)="9ca01f2f12fe4b1070f86090e2", 0xd) 11:35:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x19, 0x0, &(0x7f0000001b00)) 11:35:13 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x8, 0x4) 11:35:13 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 11:35:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f83", 0x5e}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:14 executing program 3: syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x4340) 11:35:14 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:35:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000340)={@loopback, @dev, @multicast1}, 0xc) 11:35:14 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) 11:35:14 executing program 2: semop(0x0, &(0x7f00000001c0)=[{0x0, 0x0, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) 11:35:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x4, 0x0, &(0x7f0000001d40)) 11:35:14 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 11:35:14 executing program 5: syz_clone3(&(0x7f0000000c00)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:35:14 executing program 2: syz_open_procfs(0x0, 0x0) syz_clone3(0x0, 0x0) syz_clone(0x40080000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 11:35:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @dev}, {0x0, @dev}, 0x2, {0x2, 0x0, @loopback}, 'lo\x00'}) 11:35:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f83", 0x5e}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:15 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/tpm_tis_core', 0x6000, 0x0) 11:35:15 executing program 5: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0xa56ac918e8e765e2) 11:35:15 executing program 3: syz_clone3(&(0x7f00000001c0)={0x10000080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x1}, 0x58) 11:35:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x1a, 0x0, &(0x7f0000001b00)) 11:35:16 executing program 4: getresuid(&(0x7f0000002100), 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f00000023c0), 0x0, 0x0, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000009300), 0xffffffffffffffff) 11:35:16 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000006fc0), 0x4940, 0x0) 11:35:16 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2, 0x0) 11:35:16 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x280000, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:35:16 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4, 0x7f) syz_clone3(&(0x7f0000000500)={0x200000, 0x0, &(0x7f0000000340), 0x0, {0x1a}, &(0x7f00000003c0)=""/178, 0xb2, &(0x7f0000000480)=""/15, &(0x7f00000004c0)=[0x0, 0x0], 0x2}, 0x58) [ 1850.030359][T32406] fuse: Bad value for 'fd' 11:35:16 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)) 11:35:17 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dm_mod', 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) 11:35:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f83", 0x5e}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:17 executing program 3: r0 = add_key$keyring(&(0x7f00000020c0), &(0x7f0000002100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000002140), &(0x7f0000002180)={'syz', 0x0}, 0x0, 0x0, r0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)='/dev/fuse\x00') 11:35:17 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x401c5820, &(0x7f0000001c40)) 11:35:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:17 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004900), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 11:35:17 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000006cc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 11:35:17 executing program 3: syz_clone3(&(0x7f0000000500)={0x200000, 0x0, 0x0, 0x0, {}, &(0x7f00000003c0)=""/178, 0xb2, &(0x7f0000000480)=""/15, 0x0}, 0x58) 11:35:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003080)='./cgroup.net/syz1\x00', 0x200002, 0x0) 11:35:17 executing program 5: semop(0x0, &(0x7f00000001c0)=[{0x0, 0x0, 0x1000}], 0x1) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) [ 1851.666974][T32422] 9pnet_virtio: no channels available for device 127.0.0.1 11:35:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 11:35:18 executing program 5: syz_clone3(&(0x7f0000000500)={0x200000, 0x0, 0x0, 0x0, {0x1a}, &(0x7f00000003c0)=""/178, 0xb2, &(0x7f0000000480)=""/15, 0x0}, 0x58) 11:35:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, 0xfffffffffffffffd) [ 1853.086531][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.092859][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 11:35:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf552", 0x8d}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='net/l2cap\x00') 11:35:20 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c"], 0x0) 11:35:20 executing program 5: syz_clone3(&(0x7f0000000200)={0x44100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) 11:35:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000001c0)={@private, @rand_addr=0x64010102}, 0x8) 11:35:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0xc, 0x0, 0x0) 11:35:20 executing program 3: syz_mount_image$fuse(&(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f00000023c0), 0x0, 0x0, 0x0) 11:35:20 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) [ 1854.223686][T15630] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1854.240584][T32468] fuse: Bad value for 'fd' 11:35:20 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 11:35:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4ea1, @empty}, 0x10) 11:35:20 executing program 2: semctl$GETPID(0x0, 0x0, 0x3, 0x0) [ 1854.463559][T15630] usb 5-1: Using ep0 maxpacket: 16 [ 1854.584022][T15630] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.610218][T15630] usb 5-1: config 0 has no interfaces? [ 1854.793813][T15630] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1854.831575][T15630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.877467][T15630] usb 5-1: Product: syz [ 1854.896511][T15630] usb 5-1: Manufacturer: syz [ 1854.905613][T15630] usb 5-1: SerialNumber: syz [ 1854.923203][T15630] usb 5-1: config 0 descriptor?? [ 1855.180206][T15630] usb 5-1: USB disconnect, device number 12 11:35:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, 0xe8) 11:35:22 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ec0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f0000001180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:22 executing program 5: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x401) 11:35:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf552", 0x8d}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000002c0)) 11:35:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast1}}, 0x1, 0x1, [{{0x2, 0x0, @multicast2}}]}, 0x110) 11:35:22 executing program 3: setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x545c3aa0}, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}, 0x1, {[0x1, 0x0, 0x1, 0x1000, 0x1, 0x7ff, 0x7f, 0x4b]}}, 0x5c) socket(0x5, 0x2, 0x1) r0 = socket$bt_rfcomm(0x1f, 0x2, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x42}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b40c0ee83cb0e733c88abfef30613032"}, @NL80211_ATTR_PMK={0x14, 0xfe, "38de91dd9b75fd33cb62263f1806363e"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000300)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x8, 0xca, 0x1015, 0x1, 0x7, '\x00', 0x0, r1}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x800) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x81801) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x693e}, [@call={0x85, 0x0, 0x0, 0x66}, @ldst={0x6aeb759aeacc8716, 0x2, 0x2, 0xb, 0x6, 0x100, 0x10}, @alu={0x7, 0x0, 0x1, 0xb, 0x2, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000004c0)='syzkaller\x00', 0xff, 0xaf, &(0x7f0000000500)=""/175, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000600)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x6, 0x1000, 0x80000001}, 0x10}, 0x80) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x31}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) socket$bt_rfcomm(0x1f, 0x0, 0x3) r5 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000000880)=0xfc) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) 11:35:22 executing program 2: r0 = add_key$keyring(&(0x7f00000020c0), &(0x7f0000002100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0) 11:35:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x7, 0x0, 0x0) 11:35:22 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)) 11:35:22 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x401c5820, 0x0) 11:35:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000500)) 11:35:22 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x105040, 0x0) 11:35:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x88, 0x0, 0x0, &(0x7f0000001b00)) 11:35:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x290, 0x3b0, 0x0, 0x3b0, 0x1c0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@dev, @remote, [], [], 'erspan0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@ipv4, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@remote, @private0, [], [], 'vlan0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "e719"}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 11:35:23 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0189436, 0x0) 11:35:23 executing program 2: write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='FROZEN\x00', 0x7) io_setup(0x0, &(0x7f0000000040)) 11:35:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 11:35:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf552", 0x8d}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:24 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_clone3(&(0x7f0000001880)={0xdb082000, &(0x7f0000000200), 0x0, &(0x7f0000000280), {}, &(0x7f0000000880)=""/4096, 0x1000, &(0x7f00000002c0)=""/179, 0x0}, 0x58) 11:35:24 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/4096) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 11:35:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e22, @empty}, 0x10) [ 1857.818137][T32523] x_tables: duplicate underflow at hook 1 11:35:24 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0045878, 0x0) 11:35:24 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x80045300, 0x0) 11:35:24 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x280000, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x2d, 0x7, 0xfffffb6a, 0x8, 0xba4, 0x80000001}}, 0x40800) fcntl$getown(r0, 0x9) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x88001, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x105040, 0x0) 11:35:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)="6a05653e6979f1a52f89989ef1ef07772ed735e89084a3b1159e48f1a2082083f179ce3d07cf681c76ec1c4e974857e57714a069af0b68d42ac1f9412589cac1ae58752379f1e237a87ef07704909006ca6af7dfd3091f7b6a641ca0e93efb44a804ab0a363b7351787eb4452b47fc475047548d5248beb4acfd4954a83fc005cf9e572a650e4047136ea6c51dba6837", 0x90) 11:35:25 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 11:35:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0xc, 0x0, &(0x7f0000001b00)) 11:35:25 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9900, &(0x7f0000000080)={0x100002, 0x0, 0x0, {r0}}, 0x20) 11:35:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e", 0xa4}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:25 executing program 4: syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x1a}, &(0x7f00000003c0)=""/178, 0xb2, 0x0, 0x0}, 0x58) 11:35:25 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x3d, &(0x7f0000000080)=""/61, 0x41000, 0x1c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=[0x1]}, 0x80) syz_clone3(&(0x7f0000001880)={0xdb082000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0xf}, &(0x7f0000000880)=""/4096, 0x1000, &(0x7f00000002c0)=""/179, 0x0}, 0x58) 11:35:25 executing program 2: getresuid(&(0x7f0000002100), 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000006fc0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000007080)='./file0/../file0\x00', &(0x7f00000070c0), 0x4, &(0x7f0000009140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}], [{@euid_lt}]}}) 11:35:25 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 11:35:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) process_madvise(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="5254b27e1731a137a9af79f69abebda39af89078c9d9efa18823f79a12c221318be1eaae95acbf9f721e00b74d3f7de88ce76b2119e0471f882591397f7ca5570e358e03d287a79a217f2aa6ca5e1e2480db787b98a61e861c108a781c5a0383740c5adcc7ea5c923ea7a471691d0a0d78e39980faf712261dadfedf38b21b3509b8170ae0c3a8560a1a29ed01bdeb5e6ae98849d98ebf34422a3137ec", 0x9d}, {&(0x7f00000000c0)="69ce841658d9f6b159c7f7b493bd26bf7606ae4f1c0dc6265bd5153fe077337b8a35089c7c3cc6f79041510b0ed63109e92ae351b88955edad0db856b5c3e9e970a31fe1155db868cc44a60199e5327dc877e983b7440e395915407b03aa68314b882dd368f5708ab6282ec7012f3345e7fb444f55f97f67cc8e6b761ed936b11ba64cb201ee053510525afa32afacea42a1f98c52710c1fb5c865bcca0969caf41583f4ba81947d7283e1029ca21e6231f469e68a2f2734", 0xb8}, {&(0x7f0000000180)="a729d2279ee52dfbe9e00260288588e9307b6fa483fe9b970ae3f8975fa5256c1853e223c656bd789fb9a3768ede2e4f06359b1d255c0d336b41208c5f45db94da31f47f0129e10593e10b3bcef17cf1aa9be91de53953f9c1ab2becb9aa58b98d21cf9d0325a23f0f35a6d14db90bf0e5a9dffe51ecf23018456c0b09ff25c52ca491b20b", 0x85}, {&(0x7f0000000240)="2037ebc190aca63f107c99a0662c68b8affc6c8d0c31e0f0364c4d0f1a098ff5ddc63677c44660619ffb56b09ad10958a7e883d0d5b2e0148e403cd6a9460d315845b0eb34962fb2429a2b081ed865b7c85c9a7792f0cc0d2f7bc7d5e306b7450e05f5eb8668b9ca6aea4d060012edeed1dae0a7b2", 0x75}, {&(0x7f00000002c0)="a739ca4070b7e4", 0x7}, {&(0x7f0000000300)="2c67d1e40dc21f65e676c19775a5c4c2d0a3e84b7d23fbf3", 0x18}, {&(0x7f0000000340)="64e94a2db7a298097da6ddb957d1cab0adc2de918001c2feb46f67ce83daf22b5beb1105f2e8bbaedf70815f394f18ff", 0x30}], 0x64, 0x14, 0x0) [ 1859.678272][T32566] fuse: Unknown parameter 'euid<00000000000000000000' 11:35:25 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x473000, 0x0) 11:35:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) process_madvise(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="5254b27e1731a137a9af79f69abebda39af89078c9d9efa18823f79a12c221318be1eaae95acbf9f721e00b74d3f7de88ce76b2119e0471f882591397f7ca5570e358e03d287a79a217f2aa6ca5e1e2480db787b98a61e861c108a781c5a0383740c5adcc7ea5c923ea7a471691d0a0d78e39980faf712261dadfedf38b21b3509b8170ae0c3a8560a1a29ed01bdeb5e6ae98849d98ebf34422a3137ec", 0x9d}, {&(0x7f00000000c0)="69ce841658d9f6b159c7f7b493bd26bf7606ae4f1c0dc6265bd5153fe077337b8a35089c7c3cc6f79041510b0ed63109e92ae351b88955edad0db856b5c3e9e970a31fe1155db868cc44a60199e5327dc877e983b7440e395915407b03aa68314b882dd368f5708ab6282ec7012f3345e7fb444f55f97f67cc8e6b761ed936b11ba64cb201ee053510525afa32afacea42a1f98c52710c1fb5c865bcca0969caf41583f4ba81947d7283e1029ca21e6231f469e68a2f2734", 0xb8}, {&(0x7f0000000180)="a729d2279ee52dfbe9e00260288588e9307b6fa483fe9b970ae3f8975fa5256c1853e223c656bd789fb9a3768ede2e4f06359b1d255c0d336b41208c5f45db94da31f47f0129e10593e10b3bcef17cf1aa9be91de53953f9c1ab2becb9aa58b98d21cf9d0325a23f0f35a6d14db90bf0e5a9dffe51ecf23018456c0b09ff25c52ca491b20b", 0x85}, {&(0x7f0000000240)="2037ebc190aca63f107c99a0662c68b8affc6c8d0c31e0f0364c4d0f1a098ff5ddc63677c44660619ffb56b09ad10958a7e883d0d5b2e0148e403cd6a9460d315845b0eb34962fb2429a2b081ed865b7c85c9a7792f0cc0d2f7bc7d5e306b7450e05f5eb8668b9ca6aea4d060012edeed1dae0a7b2", 0x75}, {&(0x7f00000002c0)="a739ca4070b7e4", 0x7}, {&(0x7f0000000300)="2c67d1e40dc21f65e676c19775a5c4c2d0a3e84b7d23fbf3", 0x18}, {&(0x7f0000000340)="64e94a2db7a298097da6ddb957d1cab0adc2de918001c2feb46f67ce83daf22b5beb1105f2e8bbaedf70815f394f18ff", 0x30}], 0x64, 0x14, 0x0) 11:35:28 executing program 3: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000280)=""/122) 11:35:28 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000003c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f0000006b40)='./file0\x00', &(0x7f0000006b80), 0x0, &(0x7f0000006bc0)={[{}]}) 11:35:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) 11:35:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e", 0xa4}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 11:35:28 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x40200, 0x0) 11:35:28 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) 11:35:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x33, 0x0, 0x0) 11:35:28 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xe308f8f3634a9eaa, 0x0) 11:35:28 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @multicast2}, {0x0, @multicast}, 0x28, {0x2, 0x0, @rand_addr=0x64010100}, 'bond_slave_1\x00'}) 11:35:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:29 executing program 3: getresuid(&(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)) 11:35:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85320, &(0x7f0000001c40)) 11:35:29 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004900), 0x0, 0x0) read$FUSE(r0, &(0x7f0000004dc0)={0x2020}, 0x2020) 11:35:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x3, 0x0, &(0x7f0000001b00)) 11:35:30 executing program 3: mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f00000023c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}}, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000009300), 0xffffffffffffffff) 11:35:30 executing program 4: syz_mount_image$fuse(&(0x7f0000002300), 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000009300), 0xffffffffffffffff) 11:35:30 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone3(&(0x7f0000001880)={0xdb082000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:35:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e", 0xa4}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:30 executing program 2: syz_clone3(&(0x7f0000000440)={0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0, {}, &(0x7f0000000280)=""/112, 0x70, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = getpgid(0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getresuid(&(0x7f00000005c0), &(0x7f0000000600), 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x2, 0x0, 0xee00, 0xee01, 0xee00, 0x181, 0x8001}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, r1}) getgroups(0x0, &(0x7f0000000700)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x7ff, r0, r0}) getgroups(0x1, &(0x7f00000028c0)=[0x0]) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000002900)='syz0\x00') write$FUSE_OPEN(r2, 0x0, 0x0) getpid() syz_clone3(&(0x7f0000004400)={0x40100000, &(0x7f0000004100), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000042c0)=""/218, &(0x7f00000043c0)=[r0], 0x1}, 0x58) syz_clone3(&(0x7f00000044c0)={0x40800000, 0x0, 0x0, &(0x7f0000003f00), {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) getpgid(0x0) [ 1864.121552][T32623] fuse: Bad value for 'fd' 11:35:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x29, 0x0, 0x0) 11:35:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0xf, 0x0, &(0x7f0000001b00)) 11:35:32 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000002340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000004880), &(0x7f00000048c0)='./file0/../file0\x00', 0x40421, &(0x7f0000006940), 0x0, 0x0, 0x0) 11:35:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, "cc734febae52975e"}) 11:35:32 executing program 5: syz_open_procfs(0x0, &(0x7f0000000540)='net/psched\x00') 11:35:32 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)) 11:35:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:32 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ec0)='./binderfs/binder1\x00', 0x0, 0x0) 11:35:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x88, 0x48c, 0x0, 0x0) 11:35:32 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000080)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) [ 1866.156698][T32652] fuse: Bad value for 'fd' 11:35:32 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_snmp6\x00') 11:35:32 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@RTM_NEWMDB={0x98, 0x54, 0x400, 0x70bd28, 0x25dfdbfe, {0x7, r0}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@in6_addr=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@ip4=@empty, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x4, {@ip4=@local, 0x8edd}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004053}, 0x51) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@broadcast, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)=@deltclass={0x4b0, 0x29, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe}, {0x9, 0xfff3}, {0xc, 0xb}}, [@tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @tclass_kind_options=@c_htb={{0x8}, {0x444, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x6}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_RATE64={0xc, 0x6, 0x1f04}, @TCA_HTB_CTAB={0x404, 0x3, [0xd2, 0x5, 0x5, 0x800, 0x1, 0xf2d5, 0x1, 0x10000, 0x0, 0x6, 0x0, 0x400, 0x1ff, 0xffff, 0x401, 0x0, 0x6, 0x9d88, 0x1, 0x1, 0xffff, 0x9, 0x6, 0x3, 0xd690, 0x200, 0x6, 0x401, 0x0, 0xff, 0x7, 0x4, 0x99c0, 0x0, 0xfffffff7, 0x9, 0x8000, 0x1e9, 0x5, 0x200, 0x6, 0x3, 0x1, 0x10001, 0x7, 0x4, 0x7a0db6cf, 0x2, 0x0, 0x7ff, 0x5, 0x1, 0x4, 0xfffffffe, 0x20, 0x0, 0x7, 0x0, 0x5551b5a8, 0xfffffff8, 0x4, 0x3, 0x4, 0x1, 0x2, 0x7, 0x7021, 0x2, 0x7f, 0x1e, 0xfffffff9, 0x3, 0x4, 0xffff, 0x4, 0x0, 0xffffffd7, 0x8000, 0x3ff, 0x0, 0x38aa, 0x101, 0x6697, 0x80000000, 0x1ff, 0x7ff, 0x7, 0x0, 0xffff, 0x3, 0x3f, 0x3b, 0x8, 0x98f, 0x1f, 0x5, 0x6, 0x0, 0x3, 0xfffffff8, 0x8, 0x80000001, 0x5c313f78, 0x5, 0x6, 0x7fff, 0x67, 0xaa8f, 0x0, 0xfffffeff, 0x2b, 0x1, 0x101, 0xfff, 0x0, 0x1, 0x0, 0x1, 0x100, 0x40, 0x8, 0x40400000, 0x7, 0x80, 0x80000001, 0x0, 0x4, 0xef, 0x4, 0x615, 0x5, 0x3dc7, 0x7fffffff, 0xfffffffd, 0x1, 0x1000, 0x9, 0x1, 0x3ff, 0x3, 0x1000, 0x4, 0x9, 0x7, 0xfffff2c2, 0x1, 0x4700, 0x8000, 0x97f, 0x0, 0x6, 0x7, 0xe67, 0x0, 0x6, 0x686, 0x1, 0x9, 0x9, 0x2, 0x7, 0x8, 0x5, 0x3, 0xc70, 0x6, 0x1ff, 0x55, 0x9, 0x400, 0x7, 0x8, 0x736, 0x3ff, 0x87f, 0x555d244a, 0x7f, 0x5, 0xffffffff, 0x6, 0xbcf, 0x3ff, 0x1ff, 0x4, 0x100, 0x6, 0x1, 0x4, 0x2, 0x1f, 0x79, 0x8, 0x3, 0x1, 0x1, 0x326, 0x9, 0x800, 0x9, 0x1f, 0x5, 0x60000000, 0x8, 0x0, 0x80000001, 0x1000, 0x9, 0xfffffffe, 0x4, 0x7, 0x5, 0x621c08ad, 0x80000001, 0x8000, 0x3ff, 0x9, 0x3f, 0x101, 0x800, 0x7, 0x4, 0x6994, 0x77, 0x916c, 0x7, 0x84, 0x9, 0x31cf, 0x5, 0x5, 0x3, 0x1000, 0x0, 0xbe55, 0x0, 0x3c, 0x3, 0x2, 0x9, 0x0, 0x7f, 0x8, 0x4, 0x8, 0x80000001, 0xffff, 0x1000, 0x5, 0xde, 0xf75, 0x7, 0xdee4, 0x1f, 0x34a, 0x40000000, 0x5]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x7f, 0xfd}}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) r2 = syz_clone3(&(0x7f0000000c00)={0x8000, &(0x7f0000000a00)=0xffffffffffffffff, &(0x7f0000000a40), &(0x7f0000000a80)=0x0, {0x3a}, &(0x7f0000000ac0)=""/94, 0x5e, &(0x7f0000000b40)=""/69, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0x3}, 0x58) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = syz_clone3(&(0x7f0000000cc0)={0x48121000, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0x16}, &(0x7f0000000900)=""/115, 0x73, &(0x7f0000000980)=""/97, &(0x7f0000000c80)=[0x0, 0x0, 0x0, r2, 0x0, r5], 0x6}, 0x58) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d40)={'syztnl0\x00', r0, 0x80, 0x700, 0x5, 0xffffffff, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x67, 0x0, 0x40, 0x3f, 0x0, @rand_addr=0x64010102, @remote, {[@end]}}}}}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0x323544, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, &(0x7f0000000e00), {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x2, 0x9, 0xffffffff, 'snmp_trap\x00', 'syz1\x00', {0x366}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x19}, @private0, [0xffff00], [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], 'vlan0\x00', 'lo\x00', {}, {}, 0x6c, 0x4, 0x0, 0x74}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x9, 0x6, 0x3, 0x6, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [0xffffff00, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xff], 0x0, 0x202}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r8 = syz_open_procfs(r6, &(0x7f0000001280)='timerslack_ns\x00') openat$cgroup_type(r8, &(0x7f00000012c0), 0x2, 0x0) getuid() quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000702, 0x0, &(0x7f0000001300)) r9 = getuid() quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000701, r9, &(0x7f0000001380)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1e, 0x2, &(0x7f0000001400)=@raw=[@jmp={0x5, 0x0, 0x5, 0x7, 0x3, 0xffffffffffffffff, 0x4}, @call={0x85, 0x0, 0x0, 0x77}], &(0x7f0000001440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x5, 0x7, 0x1ee6e6dd}, 0x10, 0x0, r7}, 0x80) r11 = getuid() quotactl_fd$Q_SETINFO(r10, 0xffffffff80000602, r11, &(0x7f0000001580)={0x2, 0x7fffffff, 0x0, 0x2}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000001640)={&(0x7f00000015c0)=""/127, 0x7f}) r12 = getuid() quotactl_fd$Q_SETINFO(r8, 0xffffffff80000602, r12, &(0x7f0000001680)={0x6, 0x7, 0x0, 0x5}) getegid() syz_clone3(&(0x7f0000001b80)={0x4000, &(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00), {0x29}, &(0x7f0000001a40)=""/191, 0xbf, &(0x7f0000001b00)=""/39, &(0x7f0000001b40)=[r5, r2, r4, r6, r4, 0x0], 0x6, {r7}}, 0x58) getuid() geteuid() syz_open_dev$mouse(&(0x7f0000001c00), 0x4, 0x4142c0) 11:35:32 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x0, 0x1800}, {0x0, 0x6}, {0x0, 0xd2}], 0x3, 0x0) 11:35:32 executing program 4: io_setup(0x0, &(0x7f0000001040)) io_setup(0x401, &(0x7f00000010c0)) 11:35:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148da", 0xb0}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:33 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x10080, 0x0) 11:35:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 11:35:33 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 11:35:33 executing program 5: pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x44100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:35:34 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) 11:35:34 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000580)={0xffffffffffffffff, 0x2, 0xfffff838}) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone3(&(0x7f0000000500)={0x200000, 0x0, 0x0, &(0x7f0000000380), {0x1a}, &(0x7f00000003c0)=""/178, 0xb2, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) 11:35:34 executing program 4: setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x81801) 11:35:34 executing program 3: mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f00000023c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}, 0x0, 0x0, &(0x7f0000002500)="e8") syz_genetlink_get_family_id$nl80211(&(0x7f0000009300), 0xffffffffffffffff) 11:35:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) [ 1868.084524][T32693] fuse: Bad value for 'fd' 11:35:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0xd0, 0x190, 0xd0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="1fea1dc5b446"}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "9e0e"}}]}, @REJECT={0x28}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'geneve1\x00', 'team_slave_0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@set={{0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) [ 1868.192792][T32697] x_tables: duplicate underflow at hook 2 11:35:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000001140)) 11:35:35 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 11:35:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x6, 0x0, &(0x7f0000001b00)) 11:35:35 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 11:35:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148da", 0xb0}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) 11:35:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@multicast1}, 0x0, @in=@empty}}, 0xe8) 11:35:35 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000001c00), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x82000000) 11:35:35 executing program 2: syz_clone3(&(0x7f0000000200)={0x32100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:35:35 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0xa0001, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000007c0)={@private1}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ec0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 11:35:36 executing program 4: syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) 11:35:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:37 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x401c5820, 0x0) 11:35:37 executing program 5: r0 = add_key$keyring(&(0x7f00000020c0), &(0x7f0000002100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f00000001c0)='{\x00') 11:35:37 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x2, 0x0) 11:35:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000003340)='net/ip6_flowlabel\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000012c0)={0x2, &(0x7f0000001280)=[{0x4, 0x2, 0x3, 0x4}, {0x3, 0x3, 0x1, 0x5}]}) preadv(r0, &(0x7f0000001240)=[{&(0x7f0000001100)=""/147, 0x93}, {&(0x7f00000011c0)=""/110, 0x6e}], 0x2, 0x3f, 0x101) 11:35:37 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 11:35:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 11:35:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000091c0)={@multicast2, @empty}, 0x10) 11:35:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148da", 0xb0}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:37 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x181043, 0x0) 11:35:37 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_opts(r0, 0x2, 0x0, 0x0, 0x0) 11:35:37 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) syz_clone3(&(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340), 0x0, {0x1a}, &(0x7f00000003c0)=""/178, 0xb2, 0x0, 0x0}, 0x58) 11:35:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:39 executing program 4: quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000006dc0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 11:35:39 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0189436, &(0x7f0000001c40)) 11:35:39 executing program 5: syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/112, 0x70, 0x0, 0x0}, 0x58) 11:35:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) 11:35:40 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0x2f6, 0x3d, &(0x7f0000000080)=""/61, 0x41000, 0x1c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=[0x1]}, 0x80) syz_clone3(&(0x7f0000001880)={0xdb082000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0xf}, &(0x7f0000000880)=""/4096, 0x1000, &(0x7f00000002c0)=""/179, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}, 0x58) 11:35:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x30, 0x0, &(0x7f0000001b00)) 11:35:40 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000640)) 11:35:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000013c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)='7', 0x1}], 0x1}, 0x40) 11:35:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x20, 0x0, 0x5, 0x801, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 11:35:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x0) 11:35:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5", 0xb6}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) [ 1874.376354][ T314] syz-executor.5 (314) used greatest stack depth: 21760 bytes left 11:35:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [], {0x14}}, 0x28}}, 0x0) 11:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x5}, @void}}}, 0x1c}}, 0x0) 11:35:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x5, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x58}}, 0x0) 11:35:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', 0x0}) 11:35:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:42 executing program 3: r0 = socket(0x1, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) 11:35:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x28}}, 0x0) 11:35:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 11:35:42 executing program 3: r0 = socket(0x1, 0x1, 0x0) bind$rxrpc(r0, 0x0, 0x0) 11:35:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5", 0xb6}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:42 executing program 2: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 11:35:42 executing program 3: clock_gettime(0x1, &(0x7f0000000280)) 11:35:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x1, 0x5, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:35:42 executing program 5: prctl$PR_SET_MM(0x1d, 0x4, &(0x7f0000ffd000/0x3000)=nil) 11:35:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x2, 0x5, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd, @func, @func], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:35:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x34}}, 0x0) 11:35:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x18, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x58}}, 0x0) 11:35:44 executing program 5: socketpair(0x1, 0x0, 0x2, &(0x7f0000000000)) 11:35:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='h', 0x1}], 0x1, &(0x7f0000000340)}}], 0x1, 0x0) 11:35:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000018a05"], 0x14}}, 0x0) 11:35:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x14, 0x0, 0x2, 0x801}, 0x14}}, 0x0) 11:35:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5", 0xb6}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:35:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}}, 0x0) 11:35:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000006640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000001c0)="c44fa33393b7dfd12cb78411a723e9f1a4d2bbc145defabc2d0eb511afc6fd589b931a9fcbedb89562ac0d66f468fb8a281762e7985d774bbafc5557ac2e58fe060d99435d564e67676b41a4f3e4a7861b0ff5f222182e13bdf86d8cedf6bf18cbb87b97c49bf30c456da47bf725a824ebcd8374e97442ee7935b0ebd0ed0e60ca91f0572e108399946882fd0a2ee36fb3570269bc5a870537ff8a05b6819ebb994372898d95f3b15ad9bfe80aeb9413615ae899eda4", 0xb6}, {&(0x7f0000000280)="e8f337b2ae6503f381cf4be3c489b9e0cd4a535b01829e929aadd0c60fc213aca05136bf0ad8f5e63b863fb28039b33da54e956d0bf773b50a3b1fed0594e0f6f957e7b242be82b6c4d11a72df8126bab4a25877cb37307d439072497a90208d32429859153fcceeca6f6746d05f56c92abf9b2c9ac867030e2ed372ae6995b9e748c5973692127c576f71f94d97318212cc7a92deb3", 0x96}, {&(0x7f0000000340)='B\vf!', 0x4}, {&(0x7f0000000600)="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", 0x380}], 0x4}}], 0x1, 0x0) [ 1878.819845][ T385] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 11:35:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000005"], 0x78) 11:35:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x9, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 11:35:46 executing program 4: socket(0x25, 0x1, 0x2) 11:35:46 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 11:35:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 11:35:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x14, 0x0, 0x18, 0x801}, 0x14}}, 0x0) 11:35:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x1c, 0x7, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) 11:35:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7a", 0xb9}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:35:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8}, @void}}}, 0x1c}}, 0x0) 11:35:46 executing program 4: socketpair(0x2, 0xa, 0x0, &(0x7f0000000680)) 11:35:46 executing program 5: r0 = socket(0x11, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) [ 1880.432326][ T408] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 11:35:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14}, 0x14}, 0xc}, 0x0) 11:35:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x20, 0x0, 0xb, 0x801, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 11:35:47 executing program 5: socketpair(0x2, 0xa, 0x0, &(0x7f0000000680)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 11:35:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010a05000000000000000000f5ffffff0900010073797a6f82"], 0x20}}, 0x0) 11:35:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 11:35:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)) 11:35:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x4}]}, 0x20}}, 0x0) 11:35:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x50a8}}, 0x0) 11:35:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0xf, 0xa, 0x5}, 0x14}}, 0x0) 11:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 11:35:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7a", 0xb9}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x30, 0x0, 0xb, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}}, 0x0) 11:35:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201}], {0x14}}, 0x3c}}, 0x0) 11:35:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000000080)) [ 1882.159764][ T447] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 11:35:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f00000000c0)) 11:35:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x64, 0x7, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0xc, 0x6, "8785429fce08e25f"}, @NFTA_TABLE_USERDATA={0x43, 0x6, "3b8dd45fddf0a3ca7f10d63ad01e059a1ed58d65012dca69c447642e656b977f26ed7f73ca27b2dc88f3b34b3ffa7daf5e2cf3501d90bdb2f60817a7c4fe0c"}]}, 0x64}}, 0x0) 11:35:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 11:35:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$llc(r0, 0x0, 0x0) 11:35:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:49 executing program 3: r0 = socket(0x25, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 11:35:49 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x80000001}, 0x8) [ 1883.255072][ T455] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 11:35:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x2, 0x3, 0x5}, 0x14}}, 0x0) 11:35:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7a", 0xb9}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000006640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000001c0)="c4", 0x1}], 0x1}}], 0x1, 0x48000) 11:35:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8e}}]}, 0x58}}, 0x0) 11:35:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0xfffffffffffffffd) [ 1883.604104][ T477] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1883.623581][ T477] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:35:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:35:50 executing program 2: socket(0x11, 0x3, 0x4) 11:35:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 11:35:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3e60, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x2ccc, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}]}}}, {0x50c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x500, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x477fd05637abda54}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0xd8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "84f451223650b17c788d446ab9c81e8d4530252ab9658c1f66c5da698817176d8b3fe5d0ee2a4d3aa409f4574bfb82d09b2e2f922f4575b3b567022b0df3ca1ee893118106eb2efc77030db70362fe"}, @NFTA_DATA_VALUE={0x7f, 0x1, "e3068918c640302ae61dc18d9486964df78f529735180bb97e97f83a3bbada83804bf08b62411140657d6f6ecf241a0217ad9e233998f09992119b3b506a138c13471db571739e4c8468eb97f35c87985cee57807fdf86e1b73ec9d48e030dd1148571070ca4ecaa5ac141bcaea383e3482a9e17f3acad0d93fc89"}]}, @NFTA_CMP_DATA={0x5c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb68}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0x3a8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "78e155202a46e9e881cbc723c2352a1e0d1d78b3a1f30a1117f4e292fd5f5f3c55868517f711a6154a2f21fb5b0cd03323aca6cf2ea0809619f689f454f9e54f62a2ed00625f78a82d4696872d7fd01017674000dd46158b70d50387181d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8, 0x1, "f075cdb4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x353}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0xf4, 0x1, "d0e3877f14c59099ff8656e90351339d59f949e70ce0d607a33570155c460aa82dcded883f5eec10bf41baf15380e62812619d7dcee25efdbb2839b3dfb6645c449b3f08f749cd0753633b26e5a9798fee0ad7620b794fa1f26f3b2361f66a2ff0de02c761b044adaf24d1bc43b2224e03dad0278aa178eb878915327c9f24ff354262d4b25f642fc195f9d75335d8a516acd61cdc8a3af61d5a8171118a6649536b35accbb41b554f97e3fede7c5ecf999314d1e2d748ba73f1369de50eb6545b28926a5e8767d13663bf0c73e73ebfeb32317c16b6d743ed4375229bb97d4e9567db739c6f57a8de3649458addc1ab"}, @NFTA_DATA_VALUE={0xb2, 0x1, "51fb835b0e29d5f896cdb7bc15e3d447344ffd3ba3555fce6d1b5cc1a11796c9f90d7f7a361de54b632c32c12151e18c5779b2a22c36613ea4a0eea1a72081f689cbb5c53fa2538acfdcf90959b9ca320252c7ecad51190f458a35212c215065a93c6a8fb97ec58679dfa8c356cf395f30c1e0f1b74f3f950fbffce02bb3fc19907b820de72b7b6816e7bb7b3418ec1bffa43ac517fed6dc47ce5bb136384e03891d13f9719228beff5c54290a17"}]}]}}}, {0x2730, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2724, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_DATA={0x126c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "66dc5223e013fe8473d5e580d5dabac788a45f7bff469332b0eedfdd788f5c1ac202c31acf7cc1022a85d093febc1b987d4aa9a55cba196a988943311209e9e83c4d8c2a3b974cc9e744055cbc341a39eb2dd56ac773285d144ea988e498d77aa8c42bccac9e8ed77c74a4116017925ee5ee55ebd1cf16c1483388eece287207ecd59c0c2adaabc26b6b01e7a857055fa7"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x5c, 0x1, "a2b8b51d8038b6ccc9ebdf6c2bc7d8c6f5aea8051e2ebc45928da6c59e91cb8076f6dc97ad03fc0de9a5490bd430cad07ed301c8c048333677fd480b0c64c0ca3034b064e35291743120600aa7b0c96025c8aed9c8bb76e0"}, @NFTA_DATA_VALUE={0x75, 0x1, "b25c843617770c90dd317223cdec11d33233808bf5b753d31a8f84ac7e8d784f1b543e3887258c011cc2be0e3a4daf7f560a25208056eba544e5f9fec97d393ca3979d3238cd3606cc2f56c5d22e933aa42a381b3d038db1282c6d08377462104368112a98a913bfe3b6e4cc6b1dc1e8b6"}, @NFTA_DATA_VALUE={0x41, 0x1, "66090c8adc8d12d2e584dec220158014d328cdd42913f95d3419a1b8e996b45035d7fbcfb5f0bca9daa0714a8d7e72f5c6152158c1d76607aee04fa399"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6b}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x40000}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_DATA={0x320, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "04d4c71a33677594b0184f083cab4446a93c501da80a9a256c7a2566175d752ca07ef2a6228739938ab637a379f0af9fef11049cbfe741f62b748555b80df54b2c3b849f0c337c37e94522624ccb2030b351ee84da3b7aef03bfb1d81a8d1ae4b8d24652d1ad018b70543eeed4ba58f63ac6fe7ab22d854927a5e26f8e7342175a05c3684e257ac7b3ae51f5f5c9563dd47ad1"}, @NFTA_DATA_VALUE={0xd8, 0x1, "490cdd48402671302007c5b28534469ed39b71db66a1b9ffa1538400307203c0c2e9f58bd8f5f066d73d8fce2655e87dec89ea42b1ca59645fffdc5dcda905b9b2e667f41d337e032c067f4e30381dfae698733effecce687e958a06d2c1a3d7b9f1a110a538a1d983f18de3852fa3a82a0fdd7b8e6d23a5d806fb9bbf5c2de88432de8de82ad2bef858a45ce092c0b16e97e7252697c2db1fd4fdcc43088f7e30fa1d9c78b92dd92bb59b39f11f0e2d3241b5ac7de024de67e0aed727717fc59b6e4fd054029592c494569505d32302c2a367bc"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd441}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "d15be41cda63d56b5a6f0aa8daa1d5ea1e24a946bc13bdb33b3acf3987dc703cd3fe764ed3029ef913358cd3c749268a1755047455d087b23b"}, @NFTA_DATA_VALUE={0xec, 0x1, "db21063456182f85831b5fc91e9d57b1b700a2d8b9c6df190152c900e0f1187216542c15f727c7b07b7673e9e7658e0500de109653070a3fddfa74fc3ecb6c0a8b05b3648cb941d93bad55e211e4f8a68213154dbc219714a4abfb159aacd2e2e13c61302b409e2829bac5311399b69747ab48738ac821007ad83b2850377ccebb09c47ec96e7be35186bd3a03b477f92e2b989d6fa6743a4cd118e5da6d64d533f57e410d7cfc4a737abb50eed060c031d3036ad83156d40a948ee20445bd9c6668b1ce920ad68d6f5c3ab0bc5214766387f6d5accf88b4ca6024c5477c5573527b18ee4d1b0620"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}]}, @NFTA_CMP_DATA={0x1174, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x34, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_USERDATA={0x87, 0x7, 0x1, 0x0, "d81c78c92967ad5ff83aa4616b65b2375b19df7919da698140594d7ccaeeb153c5c21bf21e9268df69740de136139aa870480b78e428de223b1712c9ac4ef9a59d4cf52ce08d3d8ab13160d298d64264f5de3faad18cbe58d76191fc1ef0f7344f476a63af164f6212c6dff91bf79e61aa35c06a6240d9112239472b120926b43838ba"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, ',%/\x00'}, @NFTA_MATCH_NAME={0x5, 0x1, '\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x7fff}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}]}, @NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x3eac}}, 0x4) 11:35:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4) 11:35:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 11:35:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240), 0x4) 11:35:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad6", 0xba}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f0000000080)={0x0, 0x0}, 0x10) 11:35:51 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000000c0), 0x10) 11:35:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x87, @dev={0xac, 0x14, 0x14, 0x44}, 0x4e24, 0x0, 'nq\x00'}, 0x2c) [ 1885.253387][ T503] IPVS: set_ctl: invalid protocol: 135 172.20.20.68:20004 11:35:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) 11:35:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xfffffffd, 0xb42, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 11:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2b, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) 11:35:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x40086602, 0x0) 11:35:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xfffffffd, 0xb42, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x48) 11:35:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x1, 0x0) 11:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}}, 0x0) 11:35:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad6", 0xba}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'lo\x00', {0x2, 0x0, @dev}}) 11:35:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10) 11:35:53 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000080)="59e1986b820f2d2d34845d567af60f01a375e4801d", 0x15}], 0x1}}], 0x1, 0x0) [ 1886.828060][ T532] ieee802154 phy0 wpan0: encryption failed: -22 11:35:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x541b, &(0x7f0000000040)={0x8, 'vlan1\x00', {'syzkaller0\x00'}}) 11:35:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5452, &(0x7f0000000000)={'caif0\x00', {0x2, 0x0, @initdev}}) 11:35:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x0}, 0x10) 11:35:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:54 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 11:35:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x82, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) 11:35:54 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000014c0)="0f", 0x1}], 0x1, &(0x7f0000003040)=ANY=[], 0x100}, 0x0) 11:35:54 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20040010, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10) 11:35:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad6", 0xba}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0, 0xffffffffffffff87}}, 0x0) 11:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000400)={&(0x7f0000000900), 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED]}, 0x1c}}, 0x0) 11:35:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000004180)={{0x0, @loopback, 0x0, 0x0, 'lc\x00'}, {@multicast2}}, 0x44) 11:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) 11:35:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) 11:35:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_virt_wifi\x00'}, 0x18) [ 1888.463886][ T565] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 1888.475101][ T566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 11:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f0000000080)={0x0, 0x0}, 0x10) 11:35:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) 11:35:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x541b, 0x0) 11:35:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "5063be234eb1d695010e7929fd51f38e2934746771d8282a3df1704137139afd", "a4581f1e5c7582001c25b21504b06889e92bae431322f3a78a1e16a8dee6da3e"}}}]}, 0x268}}, 0x0) 11:35:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002100)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x0) 11:35:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}], 0x20}}], 0x1, 0x0) 11:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 11:35:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8906, 0x0) 11:35:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:56 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000180)=@raw=[@kfunc], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:35:56 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000080)='Y', 0x1}], 0x1}}], 0x1, 0x0) 11:35:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) 11:35:56 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'vlan0\x00'}) 11:35:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x1, 0x0) [ 1890.143380][ T600] ieee802154 phy0 wpan0: encryption failed: -22 11:35:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x1, &(0x7f0000000480)=@raw=[@call], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:35:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x24, 0x0, &(0x7f0000000280)) 11:35:57 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1_to_bridge\x00') 11:35:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x1, @loopback}]}, &(0x7f00000000c0)=0x10) 11:35:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x25, &(0x7f0000000080)={0x0, 0x0}, 0x10) 11:35:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x258, 0x0, 0x120, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg1\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@remote, @private, 0x0, 0x0, 'bond_slave_0\x00', 'ip6_vti0\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@broadcast, @ipv4=@local, @ipv6=@mcast1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 11:35:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x80086601, 0x0) 11:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1d, &(0x7f0000000080)={0x0, 0x0}, 0x10) 11:35:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:35:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 11:35:57 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 11:35:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:35:58 executing program 3: socket(0x25, 0x5, 0xfffffffa) 11:35:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000600)="80ad8493cccd149051cc3fdcd392de543dbd34d472c180bb0978d6c6b6b74e90ccc9fac326eafea5964a34a0539200338c84d41be3121396c73ee892cbd6c40c6ff8c643ac71da2bb0af7e3e20f406428e947a161db84ead2074f159b1b6b47bbda56b2ac225e3b7282fcd5504a45f270628d745cdc1afb2724631d0d5a889231293788b13b9525e6efd0cd9ef52cdc4f66fc8e992f8f0a4961b345c33aa675f7ef2071e962b21900e9cdd9c9bb544943f61fb40de606cc54c", 0xb9}, {&(0x7f00000006c0)="b862cec726c9394b17de044e6d7973ab8341d205cbc8e6167469937850af98dbafe2f84b35b3df4a307af17189af68950afbad57d2e89add0899134c4d98ed3d72da623fb7c411e6791919ce242ef3955dc8e900f19456546d6bd42ab51d595752736df91bd9323808290b9ddef577e25e2a6857f02290398af08254178f75a50b7ac781b981867c50e7354f4a47", 0x8e}, {&(0x7f00000004c0)="b02518d1d5605241ea9e01157771df4a758da8ee6a873fd12712bd145efac18fa0088ef6faf8b0c0a4555b4501de924dd10ab1b4f12bb1155d", 0x39}, {&(0x7f0000000780)="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", 0xd41}], 0x4}}], 0x1, 0x0) 11:35:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5451, 0x0) 11:35:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5450, 0x0) 11:35:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x2, &(0x7f0000000000)={'caif0\x00', {0x2, 0x0, @initdev}}) 11:35:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @private}, 0x10) 11:35:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x82, 0x0, &(0x7f0000000280)) 11:35:59 executing program 3: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 11:35:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'vlan1\x00', {'syzkaller0\x00'}}) 11:35:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x1, 0x0) 11:35:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000340)=0x10) 11:36:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:36:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:36:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="16"], 0x48}}, 0x0) 11:36:00 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000080)="59e1986b820f2d2d34845d56", 0xc}], 0x1}}], 0x1, 0x0) 11:36:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x16}]}, 0x10) 11:36:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) 11:36:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xeb1d644cd346df73, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1893.916986][ T668] ieee802154 phy0 wpan0: encryption failed: -22 11:36:00 executing program 4: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x3544b4b497333aca) 11:36:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8914, &(0x7f0000000000)={'caif0\x00', {0x2, 0x0, @initdev}}) 11:36:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x49, &(0x7f0000000080)={0x0, 0x0}, 0x10) 11:36:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x3, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) 11:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) 11:36:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:36:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:36:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0xfffffffe}}) 11:36:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:36:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000180)) 11:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x20}}, 0x0) 11:36:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002100)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x0) 11:36:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000000c0)={0x6, @rand_addr, 0x0, 0x0, 'fo\x00'}, 0x2c) 11:36:01 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 11:36:01 executing program 4: pipe(&(0x7f0000001980)={0xffffffffffffffff}) connect$inet(r0, 0x0, 0x0) 11:36:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2}, {0x6}]}, 0x10) 11:36:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x1, 0x0, 0xfffffffffffffff8}) 11:36:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:36:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8953, 0x0) 11:36:03 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:36:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettclass={0x24}, 0x24}}, 0x0) 11:36:03 executing program 3: r0 = socket(0x25, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 11:36:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:36:03 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 11:36:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0x600, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 11:36:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xfffffffd, 0xb42, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x7}, 0x48) 11:36:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x0) 11:36:03 executing program 4: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_bond\x00', {}, 0x1}) 11:36:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004680)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xf0}, @end, @timestamp_prespec={0x44, 0x4}]}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) [ 1897.255065][T15630] IPVS: starting estimator thread 0... [ 1897.363771][ T743] IPVS: using max 30 ests per chain, 72000 per kthread 11:36:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:36:04 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000001240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) 11:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000240)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "43e8edfeed61721ca62cbc4b71b36c41130f51ff01ce7bf1c350e8b260f091db876c170dddaefcbafde49ba268f9ad0d9a2f18d0ba0626b7f48750aa68d863068cf3babcc259dd2e5c8cd74bfa"}, @ETHTOOL_A_BITSET_MASK={0x1001, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "ad936ec94fd8472c581984aa80ba02c4ee"}, @ETHTOOL_A_BITSET_MASK={0xe15, 0x5, "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"}]}]}, 0x1ec4}}, 0x0) 11:36:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000016fa49"], 0x38}}, 0x0) 11:36:04 executing program 4: r0 = socket(0xf, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000080)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)={0x2, 'macvtap0\x00', {0x8}, 0xba49}) pipe(&(0x7f0000000180)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'ip6gretap0\x00', {0x2}}) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0}}, 0x11) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={r2, 0x9}) 11:36:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:36:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4a, &(0x7f0000000080)={0x0, 0x0}, 0x10) 11:36:04 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="9fdf91e79382", @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @broadcast}}}}, 0x0) 11:36:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 11:36:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8982, &(0x7f0000000000)={'caif0\x00', {0x2, 0x0, @initdev}}) 11:36:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback}}}], 0x20}}], 0x1, 0x0) 11:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f0000000080)={0x0, 0x0}, 0x10) [ 1899.164039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.176293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.188470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.200611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.212800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.224963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.237095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.249182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.261342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1899.273544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.173504][ C1] net_ratelimit: 29888 callbacks suppressed [ 1904.173519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.191759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.203961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.216219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.228463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.240875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.253043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.265357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.277793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1904.290043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) 11:36:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:36:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x258, 0x0, 0x120, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@remote, @private, 0x0, 0x0, 'bond_slave_0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 11:36:12 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1, 0x1c}, 0x1c) 11:36:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 11:36:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000005400)={'lo\x00', {0x2, 0x0, @multicast1}}) 11:36:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, 0x0, 0x0, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:36:13 executing program 2: syz_clone(0x4a009000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:36:13 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, 0x0, &(0x7f0000000140)={0x0}) 11:36:13 executing program 4: getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) 11:36:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000a00000000000000210000000c00050000000000000000000a0001002f0900000000000009001f0070687931"], 0x38}}, 0x0) [ 1909.183442][ C1] net_ratelimit: 25548 callbacks suppressed [ 1909.183462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.201772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.214136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.226511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.238907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.251100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.263364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.275686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.288130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1909.300420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) 11:36:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) flistxattr(r0, &(0x7f00000014c0)=""/219, 0xdb) 11:36:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000140)=0x10) [ 1914.193698][ C1] net_ratelimit: 28646 callbacks suppressed [ 1914.193717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.212084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.224482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.237202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.249633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.262014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.274540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.287007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.299398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.311768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1914.644920][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.657563][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 11:36:21 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:36:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, 0x0, 0x0, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:36:21 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x0, 0x6, 0x8}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) 11:36:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="eb", 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x82, &(0x7f0000000040)={r2}, &(0x7f00000001c0)=0x18) 11:36:21 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 11:36:24 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) [ 1919.203582][ C1] net_ratelimit: 27332 callbacks suppressed [ 1919.203597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.221862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.234264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.246658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.258853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.271033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.283166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.295281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.307412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1919.319512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.213510][ C1] net_ratelimit: 26535 callbacks suppressed [ 1924.213530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.231890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.244391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.256817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.269254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.281651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.294001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.306359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.318821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1924.331388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) 11:36:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) close(r1) 11:36:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2040, 0x0) 11:36:31 executing program 3: socketpair(0x28, 0x0, 0x4, &(0x7f0000000100)) 11:36:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x0, 0x1, 0x23, 0x3}, {}, {0x6}]}) 11:36:31 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:36:32 executing program 3: syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 11:36:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f00000001c0)=@framed={{}, [@func, @map_val]}, &(0x7f0000000000)='GPL\x00', 0x3, 0xea, &(0x7f0000000040)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1929.223477][ C1] net_ratelimit: 26117 callbacks suppressed [ 1929.223496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.241731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.254103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.266480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.278919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.291426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.304160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.316564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.328943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1929.341366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.233521][ C1] net_ratelimit: 23013 callbacks suppressed [ 1934.233540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.251790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.264110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.276423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.288766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.301029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.313156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.325426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.337746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1934.350050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.243683][ C1] net_ratelimit: 24288 callbacks suppressed [ 1939.243704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.261946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.274321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.286758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.299288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.311596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.324218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.336546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.348767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.361163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.253597][ C1] net_ratelimit: 24811 callbacks suppressed [ 1944.253618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.271868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.284209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.296595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.309163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.321489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.333825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.346171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.358480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1944.370843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.263543][ C1] net_ratelimit: 24294 callbacks suppressed [ 1949.263564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.281838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.294281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.306633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.318959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.331612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.344047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.356385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.368672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1949.381013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.273424][ C1] net_ratelimit: 24549 callbacks suppressed [ 1954.273443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.291660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.304020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.316458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.328835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.341033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.353329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.365703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.378138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1954.390471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.283572][ C1] net_ratelimit: 24286 callbacks suppressed [ 1959.283591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.301840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.314204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.326511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.338723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.350986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.363156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.375505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.387832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1959.400121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.293421][ C1] net_ratelimit: 23688 callbacks suppressed [ 1964.293442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.311713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.324060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.336407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.348751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.361080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.373791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.386112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.398442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1964.410758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.303576][ C1] net_ratelimit: 23891 callbacks suppressed [ 1969.303590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.321742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.334027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.346328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.358611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.370738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.382990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.395300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.407583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1969.419801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) 11:37:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0xae) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, 0x0, 0x0, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r4, 0x0, 0x80006) 11:37:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 11:37:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x62}}, &(0x7f0000000240)='GPL\x00', 0x3, 0xdf, &(0x7f0000000280)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:37:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x0, 0xc}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0xdf, &(0x7f0000000280)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:37:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x3, 0xdf, &(0x7f0000000280)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:37:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000009100)) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000540)="62d3beadb649718530d1a6c6703bd2f4c78f25e86cf2b8898f411f47b3fac6e0b598dd9faf3b66a742ce0fc7c91cce282abd73d0f8200eab30db95d38495d3c09f35897538ed16d84d4599c943030f730f4bfc17c6dac4ff010e91299f8323ec0bee27ed6015c6c32646b65742064662845b5ad6e35b8e944b3ac2b4004c8814b967b835bfd5df8160d3eaf55279b67422722987258c0c17a7145980dbc7c4a647d8162e9134d8a1176b44dfce0148daa2f2b36e84d5314d7ad671", 0xbb}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x40040c5}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000000100", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="200000000000000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRESOCT], 0xb8, 0x40804}}], 0x2, 0xc000) sendfile(r2, r3, 0x0, 0x80006) 11:37:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000240)='GPL\x00', 0x3, 0xdf, &(0x7f0000000280)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:37:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x3}]}}}}}) 11:37:18 executing program 4: r0 = semget(0x2, 0x0, 0x0) semop(0x0, &(0x7f0000000640)=[{}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000680)=""/4096) 11:37:18 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:37:19 executing program 2: semget(0x2, 0x2, 0x24c) 11:37:19 executing program 3: chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0) [ 1974.313433][ C1] net_ratelimit: 26644 callbacks suppressed [ 1974.313452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1974.331670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1974.344046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1974.356411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1974.368865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1974.381090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1974.393317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1974.405510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1974.417681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1974.429915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1976.074697][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.087573][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.268592][ T906] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1979.282071][ T906] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1979.292802][ T906] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1979.301154][ T906] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1979.309921][ T906] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1979.317597][ T906] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1979.323590][ C1] net_ratelimit: 20174 callbacks suppressed [ 1979.323605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.342831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.355233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.367597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.379979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.392319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.404701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.417039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.429393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.441739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1979.569034][ T905] chnl_net:caif_netlink_parms(): no params data found [ 1979.717071][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.730698][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.740790][ T905] bridge_slave_0: entered allmulticast mode [ 1979.754554][ T905] bridge_slave_0: entered promiscuous mode [ 1979.762870][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.778845][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.792200][ T905] bridge_slave_1: entered allmulticast mode [ 1979.808161][ T905] bridge_slave_1: entered promiscuous mode [ 1979.906378][ T905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1979.929103][ T905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1980.073320][ T905] team0: Port device team_slave_0 added [ 1980.090374][ T905] team0: Port device team_slave_1 added [ 1980.184633][ T905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1980.191617][ T905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1980.228421][ T905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1980.247351][ T905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1980.261317][ T905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1980.301419][ T905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1980.380211][ T905] hsr_slave_0: entered promiscuous mode [ 1980.400499][ T905] hsr_slave_1: entered promiscuous mode [ 1980.431639][ T905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1980.441915][ T905] Cannot create hsr debugfs directory [ 1981.403866][ T906] Bluetooth: hci6: command 0x0409 tx timeout [ 1983.484820][ T906] Bluetooth: hci6: command 0x041b tx timeout [ 1983.556737][ T905] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.861647][ T905] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.259973][ T905] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.333603][ C1] net_ratelimit: 21780 callbacks suppressed [ 1984.333624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.352009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.364155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.376425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.388574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.400878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.413057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.425380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.438184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.450578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1984.563133][ T905] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.079662][ T905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1985.107528][ T905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1985.132508][ T905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1985.164518][ T905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1985.340289][ T905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1985.381995][ T905] 8021q: adding VLAN 0 to HW filter on device team0 [ 1985.399571][T31202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1985.406745][T31202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1985.449204][T31202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1985.456363][T31202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1985.573811][ T906] Bluetooth: hci6: command 0x040f tx timeout [ 1985.912514][ T905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1986.004496][ T905] veth0_vlan: entered promiscuous mode [ 1986.027122][ T905] veth1_vlan: entered promiscuous mode [ 1986.101470][ T905] veth0_macvtap: entered promiscuous mode [ 1986.115664][ T905] veth1_macvtap: entered promiscuous mode [ 1986.163781][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.183113][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.213422][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.233415][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.243278][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.263919][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.284746][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.306393][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.324232][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.343712][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.363344][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.383505][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.406262][ T905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1986.432051][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1986.460274][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.482052][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1986.493516][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.503345][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1986.523576][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.543605][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1986.566882][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.581844][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1986.596276][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.612277][ T905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1986.626774][ T905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.644349][ T905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1986.680853][ T905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.696437][ T905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.710566][ T905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.728393][ T905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.644815][ T5077] Bluetooth: hci6: command 0x0419 tx timeout [ 1989.343493][ C1] net_ratelimit: 20528 callbacks suppressed [ 1989.343512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1989.361721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1989.373903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1989.386221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1989.398495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1989.410796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1989.423092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1989.435426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1989.447728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1989.460128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.353409][ C1] net_ratelimit: 23603 callbacks suppressed [ 1994.353428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.371621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.383942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.396283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.408452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.420718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.432861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.445145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.457458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.469833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.363689][ C1] net_ratelimit: 23532 callbacks suppressed [ 1999.363710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.381919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.394276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.406632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.418979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.431338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.443719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.456048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.468441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1999.480798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.373631][ C1] net_ratelimit: 23746 callbacks suppressed [ 2004.373650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.391909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.404355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.416704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.429065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.441406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.453803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.466145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.478459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2004.490767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.383645][ C1] net_ratelimit: 24518 callbacks suppressed [ 2009.383666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.401896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.414224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.426568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.438880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.451280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.463754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.476062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.488365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.500723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.393449][ C1] net_ratelimit: 24030 callbacks suppressed [ 2014.393468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.411683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.424039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.436387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.448564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.460875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.473402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.485654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.498014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2014.510372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.403623][ C1] net_ratelimit: 24800 callbacks suppressed [ 2019.403641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.421864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.434217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.446992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.459355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.471619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.483867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.496210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.508539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2019.520848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.413632][ C1] net_ratelimit: 23904 callbacks suppressed [ 2024.413653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.431958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.444312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.456682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.469038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.481446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.493811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.506181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.518373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2024.530632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.423539][ C1] net_ratelimit: 23714 callbacks suppressed [ 2029.423558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.441748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.454111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.466460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.478863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.491213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.503588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.515938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.528302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2029.540670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.433549][ C1] net_ratelimit: 23529 callbacks suppressed [ 2034.433575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.451797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.464128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.476460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.488800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.501133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.513477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.525824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.538140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2034.550459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2037.410624][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.417071][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.443500][ C1] net_ratelimit: 23800 callbacks suppressed [ 2039.443520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2039.461812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2039.474233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2039.486633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2039.498981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2039.511312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2039.523626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2039.535921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2039.548110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2039.560394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.453422][ C1] net_ratelimit: 23126 callbacks suppressed [ 2044.453442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.471725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.484117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.496478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.508799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.521173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.533552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.545914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.558271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2044.570566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2046.745576][ T906] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2046.761402][ T906] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2046.771156][ T5082] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2046.779273][ T5082] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2046.786904][ T5082] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2048.843727][ T5077] Bluetooth: hci7: command 0x0409 tx timeout [ 2049.463469][ C1] net_ratelimit: 22036 callbacks suppressed [ 2049.463487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.481741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.494079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.506406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.518694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.530824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.543151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.555385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.567659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.579806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2050.923591][ T5077] Bluetooth: hci7: command 0x041b tx timeout [ 2053.003761][ T5077] Bluetooth: hci7: command 0x040f tx timeout [ 2054.473536][ C1] net_ratelimit: 24053 callbacks suppressed [ 2054.473555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2054.491725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2054.504023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2054.516430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2054.528562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2054.540924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2054.553239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2054.565528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2054.577804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2054.590049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2055.083566][ T5077] Bluetooth: hci7: command 0x0419 tx timeout [ 2059.483543][ C1] net_ratelimit: 24417 callbacks suppressed [ 2059.483563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2059.501756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2059.514085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2059.526421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2059.538766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2059.551467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2059.563799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2059.576082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2059.588364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2059.600662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.493488][ C1] net_ratelimit: 24305 callbacks suppressed [ 2064.493508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.511695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.524102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.536553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.548993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.561270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.573577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.585831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.598090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2064.610356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.503461][ C1] net_ratelimit: 24116 callbacks suppressed [ 2069.503480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.521709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.534064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.546375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.558839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.571124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.583440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.595753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.608062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2069.620374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.513529][ C1] net_ratelimit: 23270 callbacks suppressed [ 2074.513548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.531784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.544112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.556464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.568637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.580888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.593040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.605299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.617665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2074.630009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.523602][ C1] net_ratelimit: 23791 callbacks suppressed [ 2079.523621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.541849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.554174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.566498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.578777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.590919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.603247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.615360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.627612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2079.639784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.533413][ C1] net_ratelimit: 23305 callbacks suppressed [ 2084.533433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.551626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.563955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.576261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.588587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.600736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.613004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.625174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.637426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2084.649551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.543485][ C1] net_ratelimit: 23424 callbacks suppressed [ 2089.543503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.561745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.574077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.586390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.598719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.611036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.623400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.635707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.648050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2089.660390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.553616][ C1] net_ratelimit: 23611 callbacks suppressed [ 2094.553638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.571827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.584220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.596537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.608850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.621170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.633551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.646459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.658860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2094.671194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2098.852310][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.858727][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.563407][ C1] net_ratelimit: 23661 callbacks suppressed [ 2099.563425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2099.581676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2099.594007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2099.606340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2099.618593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2099.630733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2099.643017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2099.655140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2099.667406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2099.679770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2104.573610][ C1] net_ratelimit: 23548 callbacks suppressed [ 2104.573630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2104.591816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2104.604274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2104.616814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2104.629430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2104.641753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2104.654130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2104.666468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2104.678893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2104.691239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2106.043755][ T906] Bluetooth: hci6: command 0x0406 tx timeout [ 2109.583611][ C1] net_ratelimit: 23940 callbacks suppressed [ 2109.583632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2109.601851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2109.614223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2109.626544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2109.638873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2109.651390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2109.663800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2109.676128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2109.688476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2109.700807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2113.918724][ T5077] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2113.929988][ T5082] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2113.943087][ T5082] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2113.951715][ T5082] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2113.964506][ T5077] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2114.593486][ C1] net_ratelimit: 21397 callbacks suppressed [ 2114.593505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2114.611800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2114.624159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2114.636562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2114.648933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2114.661322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2114.673665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2114.685851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2114.698130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2114.710485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2116.043779][ T906] Bluetooth: hci8: command 0x0409 tx timeout [ 2118.124173][ T906] Bluetooth: hci8: command 0x041b tx timeout [ 2119.603390][ C1] net_ratelimit: 23605 callbacks suppressed [ 2119.603410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2119.621673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2119.634077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2119.646468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2119.658923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2119.671378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2119.683851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2119.696229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2119.708601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2119.720804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2120.204243][ T906] Bluetooth: hci8: command 0x040f tx timeout [ 2122.283817][ T906] Bluetooth: hci8: command 0x0419 tx timeout [ 2124.613662][ C1] net_ratelimit: 23417 callbacks suppressed [ 2124.613683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2124.631962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2124.644319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2124.656724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2124.669071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2124.681452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2124.693802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2124.706201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2124.718555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2124.730732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2129.623368][ C1] net_ratelimit: 23509 callbacks suppressed [ 2129.623388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2129.641614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2129.654009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2129.666358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2129.678745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2129.691116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2129.703544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2129.715898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2129.728253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2129.740601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2134.633581][ C1] net_ratelimit: 23766 callbacks suppressed [ 2134.633603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2134.651914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2134.664297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2134.676686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2134.690172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2134.702536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2134.714910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2134.727334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2134.739771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2134.752134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2139.643565][ C1] net_ratelimit: 23567 callbacks suppressed [ 2139.643585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2139.661901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2139.674286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2139.686679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2139.699005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2139.711193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2139.723649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2139.736054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2139.748493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2139.760891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2143.003647][ T28] INFO: task kworker/1:0:22 blocked for more than 143 seconds. [ 2143.011251][ T28] Not tainted 6.4.0-next-20230707-syzkaller #0 [ 2143.050371][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2143.060774][ T28] task:kworker/1:0 state:D stack:26800 pid:22 ppid:2 flags:0x00004000 [ 2143.077558][ T28] Workqueue: ipv6_addrconf addrconf_verify_work [ 2143.089746][ T28] Call Trace: [ 2143.093067][ T28] [ 2143.104776][ T28] __schedule+0xc9a/0x5880 [ 2143.109262][ T28] ? find_held_lock+0x2d/0x110 [ 2143.121798][ T28] ? io_schedule_timeout+0x150/0x150 [ 2143.131708][ T28] ? lock_downgrade+0x690/0x690 [ 2143.143033][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 2143.151089][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 2143.163252][ T28] schedule+0xde/0x1a0 [ 2143.167635][ T28] schedule_preempt_disabled+0x13/0x20 [ 2143.173130][ T28] __mutex_lock+0xa3b/0x1350 [ 2143.190389][ T28] ? addrconf_verify_work+0x12/0x30 [ 2143.197467][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2143.203068][ T28] ? lock_sync+0x190/0x190 [ 2143.216464][ T28] addrconf_verify_work+0x12/0x30 [ 2143.221550][ T28] process_one_work+0xa34/0x16f0 [ 2143.234809][ T28] ? lock_sync+0x190/0x190 [ 2143.239287][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2143.259236][ T28] ? spin_bug+0x1c0/0x1c0 [ 2143.264059][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 2143.269132][ T28] worker_thread+0x67d/0x10c0 [ 2143.286369][ T28] ? process_one_work+0x16f0/0x16f0 [ 2143.291632][ T28] kthread+0x344/0x440 [ 2143.301021][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2143.311973][ T28] ret_from_fork+0x1f/0x30 [ 2143.321772][ T28] [ 2143.339504][ T28] INFO: task kworker/0:11:15693 blocked for more than 143 seconds. [ 2143.354228][ T28] Not tainted 6.4.0-next-20230707-syzkaller #0 [ 2143.360938][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2143.380916][ T28] task:kworker/0:11 state:D stack:24280 pid:15693 ppid:2 flags:0x00004000 [ 2143.391725][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 2143.405237][ T28] Call Trace: [ 2143.408546][ T28] [ 2143.411503][ T28] __schedule+0xc9a/0x5880 [ 2143.425014][ T28] ? find_held_lock+0x2d/0x110 [ 2143.429846][ T28] ? io_schedule_timeout+0x150/0x150 [ 2143.445733][ T28] ? lock_downgrade+0x690/0x690 [ 2143.450660][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 2143.463285][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 2143.472348][ T28] schedule+0xde/0x1a0 [ 2143.481466][ T28] schedule_preempt_disabled+0x13/0x20 [ 2143.490881][ T28] __mutex_lock+0xa3b/0x1350 [ 2143.500518][ T28] ? addrconf_dad_work+0xa7/0x1390 [ 2143.509561][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2143.520164][ T28] ? lock_downgrade+0x690/0x690 [ 2143.528934][ T28] addrconf_dad_work+0xa7/0x1390 [ 2143.542113][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 2143.551245][ T28] ? addrconf_dad_completed+0xe00/0xe00 [ 2143.562065][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 2143.576275][ T28] process_one_work+0xa34/0x16f0 [ 2143.581285][ T28] ? lock_sync+0x190/0x190 [ 2143.592212][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2143.600241][ T28] ? spin_bug+0x1c0/0x1c0 [ 2143.610807][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 2143.618595][ T28] worker_thread+0x67d/0x10c0 [ 2143.629531][ T28] ? process_one_work+0x16f0/0x16f0 [ 2143.639100][ T28] kthread+0x344/0x440 [ 2143.643216][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2143.659806][ T28] ret_from_fork+0x1f/0x30 [ 2143.669936][ T28] [ 2143.673011][ T28] INFO: task syz-executor.0:905 blocked for more than 144 seconds. [ 2143.684954][ T28] Not tainted 6.4.0-next-20230707-syzkaller #0 [ 2143.691661][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2143.707977][ T28] task:syz-executor.0 state:D stack:24456 pid:905 ppid:1 flags:0x00004004 [ 2143.722428][ T28] Call Trace: [ 2143.731731][ T28] [ 2143.741096][ T28] __schedule+0xc9a/0x5880 [ 2143.749741][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2143.763217][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2143.781415][ T28] ? io_schedule_timeout+0x150/0x150 [ 2143.791052][ T28] ? __mutex_lock+0xa36/0x1350 [ 2143.801478][ T28] schedule+0xde/0x1a0 [ 2143.810119][ T28] schedule_preempt_disabled+0x13/0x20 [ 2143.822984][ T28] __mutex_lock+0xa3b/0x1350 [ 2143.831493][ T28] ? reg_process_self_managed_hints+0x78/0x170 [ 2143.844562][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2143.850171][ T28] ? wiphy_all_share_dfs_chan_state+0x4c9/0x650 [ 2143.863718][ T28] reg_process_self_managed_hints+0x78/0x170 [ 2143.869784][ T28] wiphy_register+0x20e1/0x2ad0 [ 2143.882917][ T28] ? wiphy_unregister+0xb40/0xb40 [ 2143.891095][ T28] ? minstrel_ht_alloc+0x4a9/0x9b0 [ 2143.905463][ T28] ? ieee80211_init_rate_ctrl_alg+0x83/0x640 [ 2143.911621][ T28] ieee80211_register_hw+0x23c1/0x40e0 [ 2143.923629][ T28] ? ieee80211_ifa6_changed+0x3f0/0x3f0 [ 2143.929233][ T28] ? mark_held_locks+0x9f/0xe0 [ 2143.943131][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2143.952315][ T28] ? __hrtimer_init+0x145/0x2a0 [ 2143.964715][ T28] mac80211_hwsim_new_radio+0x26e6/0x4c70 [ 2143.970600][ T28] ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350 [ 2143.987589][ T28] hwsim_new_radio_nl+0xacf/0x1210 [ 2143.992776][ T28] ? mac80211_hwsim_new_radio+0x4c70/0x4c70 [ 2144.004412][ T28] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2144.011858][ T28] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2144.032144][ T28] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0 [ 2144.038681][ T28] ? genl_start+0x660/0x660 [ 2144.043242][ T28] ? ns_capable+0xe0/0x110 [ 2144.059966][ T28] genl_rcv_msg+0x4ff/0x7e0 [ 2144.068482][ T28] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 2144.079964][ T28] ? __dev_queue_xmit+0x1df2/0x3b10 [ 2144.089141][ T28] ? __local_bh_enable_ip+0xa4/0x130 [ 2144.099577][ T28] ? mac80211_hwsim_new_radio+0x4c70/0x4c70 [ 2144.109365][ T28] netlink_rcv_skb+0x165/0x440 [ 2144.120885][ T28] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 2144.131234][ T28] ? netlink_ack+0x1360/0x1360 [ 2144.141334][ T28] ? down_write_killable+0x250/0x250 [ 2144.152189][ T28] ? netlink_deliver_tap+0x1b1/0xcf0 [ 2144.162666][ T28] genl_rcv+0x28/0x40 [ 2144.172529][ T28] netlink_unicast+0x547/0x7f0 [ 2144.185838][ T28] ? netlink_attachskb+0x890/0x890 [ 2144.191010][ T28] ? __virt_addr_valid+0x61/0x2e0 [ 2144.201157][ T28] ? __phys_addr_symbol+0x30/0x70 [ 2144.213517][ T28] ? __check_object_size+0x323/0x730 [ 2144.218866][ T28] netlink_sendmsg+0x925/0xe30 [ 2144.233567][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 2144.238575][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2144.253392][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 2144.258533][ T28] sock_sendmsg+0xde/0x190 [ 2144.262987][ T28] __sys_sendto+0x254/0x350 [ 2144.275621][ T28] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2144.281088][ T28] ? fd_install+0x201/0x6f0 [ 2144.299303][ T28] ? __sys_socket+0x8e/0x250 [ 2144.304457][ T28] ? __sys_socket_file+0x1d0/0x1d0 [ 2144.309624][ T28] __x64_sys_sendto+0xe1/0x1b0 [ 2144.323513][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 2144.329487][ T28] do_syscall_64+0x39/0xb0 [ 2144.342982][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2144.350458][ T28] RIP: 0033:0x7f812ea3e2ac [ 2144.364456][ T28] RSP: 002b:00007ffe0da6c6e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2144.372928][ T28] RAX: ffffffffffffffda RBX: 00007f812f6d4620 RCX: 00007f812ea3e2ac [ 2144.395039][ T28] RDX: 0000000000000024 RSI: 00007f812f6d4670 RDI: 0000000000000003 [ 2144.403067][ T28] RBP: 0000000000000000 R08: 00007ffe0da6c734 R09: 000000000000000c [ 2144.420746][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2144.429175][ T28] R13: 00007f812f6d4670 R14: 0000000000000003 R15: 0000000000000000 [ 2144.445864][ T28] [ 2144.449013][ T28] [ 2144.449013][ T28] Showing all locks held in the system: [ 2144.472775][ T28] 1 lock held by rcu_tasks_kthre/13: [ 2144.485718][ T28] #0: ffffffff8c9a3db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 2144.503532][ T28] 1 lock held by rcu_tasks_trace/14: [ 2144.508856][ T28] #0: ffffffff8c9a3ab0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 2144.529441][ T28] 3 locks held by kworker/1:0/22: [ 2144.536145][ T28] #0: ffff888027e85138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8fd/0x16f0 [ 2144.554613][ T28] #1: ffffc900001c7db0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x930/0x16f0 [ 2144.577112][ T28] #2: ffffffff8e3d23a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 2144.597478][ T28] 4 locks held by kworker/1:1/26: [ 2144.602549][ T28] 1 lock held by khungtaskd/28: [ 2144.612625][ T28] #0: ffffffff8c9a49c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 2144.626634][ T28] 4 locks held by kworker/1:3/3557: [ 2144.631956][ T28] 2 locks held by getty/4779: [ 2144.643195][ T28] #0: ffff88802d0d2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 2144.653338][ C1] net_ratelimit: 21381 callbacks suppressed [ 2144.653353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2144.662881][ T28] #1: [ 2144.675199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2144.675235][ T28] ffffc900015972f0 [ 2144.678335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2144.698794][ T28] ( [ 2144.705973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2144.720917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2144.722522][ T28] &ldata->atomic_read_lock [ 2144.733211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2144.750135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2144.751693][ T28] ){+.+.}-{3:3} [ 2144.762413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2144.771214][ T28] , at: n_tty_read+0xf08/0x13f0 [ 2144.778261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:ac:f1:05:61:46, vlan:0) [ 2144.788036][ T28] 4 locks held by kworker/1:2/11732: [ 2144.795160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2144.800486][ T28] 3 locks held by kworker/0:11/15693: [ 2144.827807][ T28] #0: ffff888027e85138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8fd/0x16f0 [ 2144.844783][ T28] #1: ffffc90006907db0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x930/0x16f0 [ 2144.863918][ T28] #2: ffffffff8e3d23a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa7/0x1390 [ 2144.884312][ T28] 7 locks held by kworker/1:8/15796: [ 2144.890095][ T28] 4 locks held by kworker/1:7/803: [ 2144.903587][ T28] 1 lock held by syz-executor.0/819: [ 2144.908915][ T28] #0: ffffffff8c9afe78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x64a/0x770 [ 2144.928414][ T28] 4 locks held by syz-executor.0/905: [ 2144.953211][ T28] #0: ffffffff8e46bcd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2144.971808][ T28] #1: ffffffff8e46bd88 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x51a/0x7e0 [ 2144.983704][ T28] #2: ffffffff8e3d23a8 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_register+0x1f53/0x2ad0 [ 2144.993114][ T28] #3: ffff888077a10768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_process_self_managed_hints+0x78/0x170 [ 2145.014707][ T28] 2 locks held by kworker/1:14/920: [ 2145.020045][ T28] 1 lock held by syz-executor.0/929: [ 2145.033589][ T28] #0: ffffffff8e3d23a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 2145.043160][ T28] 1 lock held by syz-executor.0/935: [ 2145.057556][ T28] #0: ffffffff8e3d23a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 2145.073582][ T28] 2 locks held by dhcpcd/942: [ 2145.078297][ T28] #0: ffff888090924130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xe90 [ 2145.096956][ T28] #1: ffffffff8c9afe78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3e8/0x770 [ 2145.112949][ T28] 1 lock held by dhcpcd/943: [ 2145.121968][ T28] #0: ffff88807a570130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xe90 [ 2145.138591][ T28] [ 2145.140955][ T28] ============================================= [ 2145.140955][ T28] [ 2145.157907][ T28] NMI backtrace for cpu 0 [ 2145.162277][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.4.0-next-20230707-syzkaller #0 [ 2145.171237][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 2145.181312][ T28] Call Trace: [ 2145.184604][ T28] [ 2145.187551][ T28] dump_stack_lvl+0xd9/0x150 [ 2145.192170][ T28] nmi_cpu_backtrace+0x29c/0x350 [ 2145.197165][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 2145.202407][ T28] nmi_trigger_cpumask_backtrace+0x2a4/0x300 [ 2145.208424][ T28] watchdog+0xe16/0x1090 [ 2145.212712][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 2145.218731][ T28] kthread+0x344/0x440 [ 2145.222830][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2145.228513][ T28] ret_from_fork+0x1f/0x30 [ 2145.232976][ T28] [ 2145.236977][ T28] Sending NMI from CPU 0 to CPUs 1: [ 2145.242210][ C1] NMI backtrace for cpu 1 [ 2145.242221][ C1] CPU: 1 PID: 803 Comm: kworker/1:7 Not tainted 6.4.0-next-20230707-syzkaller #0 [ 2145.242242][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 2145.242254][ C1] Workqueue: events cfg80211_wiphy_work [ 2145.242284][ C1] RIP: 0010:__lock_acquire+0xf44/0x5e20 [ 2145.242313][ C1] Code: 4d e6 ff 0f 0b 31 db e9 3f f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 1e 87 91 e8 3c 90 71 00 <48> 0f a3 1d e4 2e 21 10 0f 82 f4 f9 ff ff e8 89 89 ad 02 85 c0 0f [ 2145.242332][ C1] RSP: 0018:ffffc900001e00c8 EFLAGS: 00000046 [ 2145.242347][ C1] RAX: 0000000000000001 RBX: 0000000000000020 RCX: ffffffff8165ef14 [ 2145.242361][ C1] RDX: fffffbfff230e3c1 RSI: 0000000000000008 RDI: ffffffff91871e00 [ 2145.242374][ C1] RBP: ffff888025ef0bb8 R08: 0000000000000000 R09: fffffbfff230e3c0 [ 2145.242388][ C1] R10: ffffffff91871e07 R11: 0000000000000001 R12: ffff888025ef0000 [ 2145.242401][ C1] R13: 0000000000000002 R14: dffffc0000000000 R15: 0000000000000000 [ 2145.242414][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2145.242434][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2145.242449][ C1] CR2: 0000000020404030 CR3: 000000000c775000 CR4: 00000000003506e0 [ 2145.242462][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2145.242474][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2145.242487][ C1] Call Trace: [ 2145.242491][ C1] [ 2145.242498][ C1] ? nmi_cpu_backtrace+0x1d0/0x350 [ 2145.242521][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 2145.242549][ C1] ? nmi_handle+0x13d/0x400 [ 2145.242573][ C1] ? irqentry_nmi_enter+0x80/0x90 [ 2145.242601][ C1] ? __lock_acquire+0xf44/0x5e20 [ 2145.242627][ C1] ? default_do_nmi+0x6b/0x170 [ 2145.242652][ C1] ? exc_nmi+0x171/0x1e0 [ 2145.242675][ C1] ? end_repeat_nmi+0x16/0x31 [ 2145.242703][ C1] ? __lock_acquire+0xf44/0x5e20 [ 2145.242730][ C1] ? __lock_acquire+0xf44/0x5e20 [ 2145.242755][ C1] ? __lock_acquire+0xf44/0x5e20 [ 2145.242782][ C1] ? __lock_acquire+0xf44/0x5e20 [ 2145.242808][ C1] [ 2145.242813][ C1] [ 2145.242822][ C1] ? print_usage_bug.part.0+0x5f1/0x670 [ 2145.242848][ C1] ? print_usage_bug.part.0+0x670/0x670 [ 2145.242875][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2145.242914][ C1] lock_acquire+0x1b1/0x520 [ 2145.242938][ C1] ? ip6_rcv_core+0x62/0x1df0 [ 2145.243043][ C1] ? lock_sync+0x190/0x190 [ 2145.243067][ C1] ? generic_xdp_tx+0x680/0x680 [ 2145.243088][ C1] ? ebt_do_table+0x1869/0x1dd0 [ 2145.243147][ C1] ? ebt_do_table+0x16da/0x1dd0 [ 2145.243169][ C1] ip6_rcv_core+0x91/0x1df0 [ 2145.243197][ C1] ? ip6_rcv_core+0x62/0x1df0 [ 2145.243232][ C1] ipv6_rcv+0x79/0x380 [ 2145.243259][ C1] ? ip6_rcv_core+0x1df0/0x1df0 [ 2145.243287][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 2145.243310][ C1] ? __netif_receive_skb_core+0x3900/0x3900 [ 2145.243330][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2145.243359][ C1] ? nf_hook_slow+0xfd/0x1f0 [ 2145.243412][ C1] __netif_receive_skb+0x1f/0x1c0 [ 2145.243435][ C1] netif_receive_skb+0x133/0x7a0 [ 2145.243456][ C1] ? __netif_receive_skb+0x1c0/0x1c0 [ 2145.243480][ C1] ? br_netif_receive_skb+0xfd/0x200 [ 2145.243534][ C1] br_pass_frame_up+0x303/0x430 [ 2145.243562][ C1] br_handle_frame_finish+0xd1f/0x1de0 [ 2145.243591][ C1] ? br_handle_local_finish+0x20/0x20 [ 2145.243620][ C1] ? __local_bh_enable_ip+0xa4/0x130 [ 2145.243643][ C1] ? ip6t_do_table+0xbe2/0x1a50 [ 2145.243667][ C1] ? nf_hook_slow+0xfd/0x1f0 [ 2145.243695][ C1] br_nf_hook_thresh+0x2fb/0x3f0 [ 2145.243716][ C1] ? br_handle_local_finish+0x20/0x20 [ 2145.243742][ C1] ? setup_pre_routing+0x480/0x480 [ 2145.243763][ C1] ? br_handle_local_finish+0x20/0x20 [ 2145.243789][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2145.243818][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2145.243849][ C1] br_nf_pre_routing_finish_ipv6+0x695/0xf30 [ 2145.243870][ C1] ? br_handle_local_finish+0x20/0x20 [ 2145.243903][ C1] br_nf_pre_routing_ipv6+0x41b/0x830 [ 2145.243925][ C1] ? br_validate_ipv6+0x730/0x730 [ 2145.243943][ C1] ? lock_downgrade+0x690/0x690 [ 2145.243970][ C1] ? br_nf_forward_arp+0xd40/0xd40 [ 2145.243994][ C1] br_nf_pre_routing+0xda4/0x1520 [ 2145.244020][ C1] ? br_nf_pre_routing_finish+0x1c70/0x1c70 [ 2145.244040][ C1] br_handle_frame+0xac1/0x1440 [ 2145.244067][ C1] ? br_handle_frame_finish+0x1de0/0x1de0 [ 2145.244093][ C1] ? mark_held_locks+0x9f/0xe0 [ 2145.244119][ C1] ? br_handle_local_finish+0x20/0x20 [ 2145.244144][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 2145.244173][ C1] ? br_handle_frame_finish+0x1de0/0x1de0 [ 2145.244200][ C1] __netif_receive_skb_core+0xa10/0x3900 [ 2145.244222][ C1] ? __lock_acquire+0xc1b/0x5e20 [ 2145.244248][ C1] ? generic_xdp_tx+0x680/0x680 [ 2145.244270][ C1] ? mark_lock.part.0+0xee/0x1960 [ 2145.244295][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2145.244322][ C1] ? ip6_input+0xd0/0xd0 [ 2145.244349][ C1] ? print_usage_bug.part.0+0x670/0x670 [ 2145.244381][ C1] __netif_receive_skb_one_core+0xae/0x180 [ 2145.244402][ C1] ? __netif_receive_skb_core+0x3900/0x3900 [ 2145.244425][ C1] ? mark_held_locks+0x9f/0xe0 [ 2145.244451][ C1] __netif_receive_skb+0x1f/0x1c0 [ 2145.244472][ C1] process_backlog+0x101/0x670 [ 2145.244494][ C1] __napi_poll+0xb7/0x6f0 [ 2145.244512][ C1] ? net_rx_action+0x271/0xcb0 [ 2145.244532][ C1] net_rx_action+0x8a9/0xcb0 [ 2145.244556][ C1] ? napi_threaded_poll+0x920/0x920 [ 2145.244575][ C1] ? cpuacct_stats_show+0x6d0/0x6d0 [ 2145.244604][ C1] ? mark_held_locks+0x9f/0xe0 [ 2145.244631][ C1] __do_softirq+0x1d4/0x905 [ 2145.244678][ C1] ? cfg80211_put_bss+0x1b4/0x280 [ 2145.244702][ C1] do_softirq.part.0+0x87/0xc0 [ 2145.244723][ C1] [ 2145.244728][ C1] [ 2145.244734][ C1] __local_bh_enable_ip+0x106/0x130 [ 2145.244755][ C1] cfg80211_put_bss+0x1b4/0x280 [ 2145.244779][ C1] ieee80211_rx_bss_put+0x43/0x60 [ 2145.244813][ C1] ieee80211_ibss_rx_queued_mgmt+0x1b5b/0x3080 [ 2145.244838][ C1] ? mark_lock.part.0+0xee/0x1960 [ 2145.244868][ C1] ? ieee80211_ibss_rx_no_sta+0x920/0x920 [ 2145.244896][ C1] ? find_held_lock+0x2d/0x110 [ 2145.244918][ C1] ? find_held_lock+0x2d/0x110 [ 2145.244942][ C1] ? kcov_remote_start+0x27b/0x7a0 [ 2145.244973][ C1] ? mark_held_locks+0x9f/0xe0 [ 2145.244998][ C1] ? kcov_remote_start+0x15a/0x7a0 [ 2145.245026][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 2145.245054][ C1] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2145.245078][ C1] ieee80211_iface_work+0xa4a/0xd70 [ 2145.245104][ C1] cfg80211_wiphy_work+0x253/0x330 [ 2145.245134][ C1] process_one_work+0xa34/0x16f0 [ 2145.245161][ C1] ? lock_sync+0x190/0x190 [ 2145.245185][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2145.245212][ C1] ? spin_bug+0x1c0/0x1c0 [ 2145.245237][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 2145.245259][ C1] worker_thread+0x67d/0x10c0 [ 2145.245288][ C1] ? process_one_work+0x16f0/0x16f0 [ 2145.245313][ C1] kthread+0x344/0x440 [ 2145.245332][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 2145.245356][ C1] ret_from_fork+0x1f/0x30 [ 2145.245390][ C1] [ 2145.985669][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2145.992554][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.4.0-next-20230707-syzkaller #0 [ 2146.001510][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 2146.011581][ T28] Call Trace: [ 2146.014874][ T28] [ 2146.017904][ T28] dump_stack_lvl+0xd9/0x150 [ 2146.022528][ T28] panic+0x686/0x730 [ 2146.026459][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 2146.031599][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 2146.036833][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 2146.042250][ T28] ? watchdog+0xbe8/0x1090 [ 2146.046709][ T28] watchdog+0xbf9/0x1090 [ 2146.050988][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 2146.057013][ T28] kthread+0x344/0x440 [ 2146.061109][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2146.066776][ T28] ret_from_fork+0x1f/0x30 [ 2146.071239][ T28] [ 2146.074477][ T28] Kernel Offset: disabled [ 2146.078796][ T28] Rebooting in 86400 seconds..